CVE-2026-83355

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

essh

root@kitploit: ███████╗███████╗███████╗██╗ ██╗ ██╔════╝██╔════╝██╔════╝██║ ██║ █████╗ ███████╗███████╗███████║ ██╔══╝ ╚════██║╚════██║██╔══██║ ███████╗███████║███████║██║ ██║ ╚══════╝╚══════╝╚══════╝╚═╝ ╚═╝ 为拥有服务器集群的人打造的增强版 SSH 一个纯 Rust 编写的 SSH 客户端，带有高密度、Netwatch 风格的 TUI。支持多会话、...

EUVD-2026-79708

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83355

Oracle Enterprise Manager for Fusion Middleware (component: Metrics ) in supported versions 13.5 and 24.1 contains a critical vulnerability that allows an unauthenticated attacker with network access via HTTP to fully compromise the product, resulting in takeover with high impact to confidentiali...

http-desync-guardian

Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 – 1991 HTTP/1.0 – 1996 HTTP/1.1 RFC 2068 – 1997 RFC 2616 - 1999 - 2014...

ayaFlow

ayaFlow ayaFlow 是一个基于 Rust + eBPF 的网络流量分析工具，构建于 Aya 之上。它在每个 Linux 节点上运行一个代理，在入口和出口附加 TC 分类器，并暴露实时流量数据、基于 SQLite 的历史记录以及 Prometheus 指标。 功能 通过 eBPF TC 分类器捕获 IPv4、IPv6、TCP 和 UDP 流量。 在内存中维护实时连接统计信息，并将历史记录存储在 SQLite 中。 可选地使用反向 DNS、DNS 查询域名和 TLS SNI 增强流量信息。 暴露 REST API、WebSocket 流和 Prometheus /metrics...

AIX360

AI Explainability 360 v0.3.0 ✨ 新动态： IBM Research 推出了新的 In-Context Explainability 360 ICX360 工具包，将可解释性扩展到了 LLM ，特别是针对提供给 LLM 的输入。欢迎查看！ 🚀✨ AI Explainability 360 工具包是一个开源库，支持数据集和机器学习模型的可解释性与可解释分析。AI Explainability 360 Python 包包含一套全面的算法，涵盖了解释的不同维度以及代理解释性度量。AI Explainability 360 工具包支持表格、文本、图像和时间序列数据。 ...

suricata_exporter

Suricata Prometheus Exporter 这是一个用于 Suricata 的 Prometheus Exporter，通过 unix socket 使用 dump-counters 来查询指标。 使用方法 root@kitploit: $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -version Output...

CVE-2019-10475

CVE-2019-10475 POC rápido para Jenkins CVE-2019-10475 / SECURITY-1490 reportado el 2019-10-23. El problema se encuentra dentro del plugin build-metrics, que genera algunas métricas básicas de compilación. Se usa comúnmente con el plugin de enlaces de barra lateral de Jenkins. Esta es una...

AIF360

AI Fairness 360 AIF360 AI Fairness 360 工具包是一个可扩展的开源库，包含由研究社区开发的技术，用于在 AI 应用生命周期的各个阶段帮助检测和缓解机器学习模型中的偏见。AI Fairness 360 包同时提供 Python 和 R 版本。 AI Fairness 360 包包括： 1. 一套全面的指标，用于测试数据集和模型中的偏见， 2. 这些指标的说明，以及 3. 用于缓解数据集和模型中偏见的算法。 它旨在将算法研究从实验室转化为金融、人力资本管理、医疗保健和教育等广泛领域的实际实践。我们邀请您使用并改进它。 AI Fairness 360 交互式...

scorecard

OpenSSF Scorecard...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei テンプレート 説明 このリポジトリには、CVE-2024-32030 脆弱性を検出するための Nuclei テンプレートが含まれています。この脆弱性は、JMX Metrics Collection JNDI Resolution を介したリモートコード実行を許可します。 脆弱性の詳細 ID: CVE-2024-32030 名前: JMX Metrics Collection JNDI RCE 作者: Hüseyin TINTAŞ 深刻度: 重大 説明: このテンプレートは、悪意のある JMX...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

11in1 CMS 1.2.1 - Local File Inclusion (LFI)

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. dot dot in the class parameter to 1 index.php or 2 admin/index.php. id: CVE-2012-0996 info: name: 11in1 CMS 1.2.1 - Local File Inclusion LFI author: daffainfo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: The unmanaged ELP worker is removed. The ELP worker needs to calculate new metric values for all “reachable” neighbors via an interface. Some of the metric calculation functions require locks, which may need to be...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fixed a race condition UAF in i915perfaddconfigioctl. Userspace may attempt to race the creation of the oaconfig object with config remove, resulting in a use-after-free if we dereference the object after unlocking the...

Apache Solr - Host Environment Variables Leak via Metrics API

Exposure of Sensitive Information to an Unauthorized Actor Vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users can specify which environment variables to hide, however, the default list is designed to wor...

Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...