AIF360

AI Fairness 360 AIF360 AI Fairness 360 工具包是一个可扩展的开源库，包含由研究社区开发的技术，用于在 AI 应用生命周期的各个阶段帮助检测和缓解机器学习模型中的偏见。AI Fairness 360 包同时提供 Python 和 R 版本。 AI Fairness 360 包包括： 1. 一套全面的指标，用于测试数据集和模型中的偏见， 2. 这些指标的说明，以及 3. 用于缓解数据集和模型中偏见的算法。 它旨在将算法研究从实验室转化为金融、人力资本管理、医疗保健和教育等广泛领域的实际实践。我们邀请您使用并改进它。 AI Fairness 360 交互式...

CVE-2019-10475

CVE-2019-10475 POC rápido para Jenkins CVE-2019-10475 / SECURITY-1490 reportado el 2019-10-23. El problema se encuentra dentro del plugin build-metrics, que genera algunas métricas básicas de compilación. Se usa comúnmente con el plugin de enlaces de barra lateral de Jenkins. Esta es una...

suricata_exporter

Suricata Prometheus Exporter 这是一个用于 Suricata 的 Prometheus Exporter，通过 unix socket 使用 dump-counters 来查询指标。 使用方法 root@kitploit: $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -version Output...

http-desync-guardian

Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 – 1991 HTTP/1.0 – 1996 HTTP/1.1 RFC 2068 – 1997 RFC 2616 - 1999 - 2014...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei 模板 描述 此仓库包含一个用于检测 CVE-2024-32030 漏洞的 Nuclei 模板。该漏洞允许通过 JMX 指标收集 JNDI 解析实现远程代码执行。 漏洞详情 ID: CVE-2024-32030 名称: JMX Metrics Collection JNDI 远程代码执行 作者: Hüseyin TINTAŞ 严重性: 严重 描述: 该模板通过尝试连接到恶意的 JMX 服务器来检查漏洞是否存在。 标签: cve, cve2024, jmx, rce, cve2024-32030 模板 root@kitploit: id:...

AIX360

AI Explainability 360 v0.3.0 ✨ 新动态： IBM Research 推出了新的 In-Context Explainability 360 ICX360 工具包，将可解释性扩展到了 LLM ，特别是针对提供给 LLM 的输入。欢迎查看！ 🚀✨ AI Explainability 360 工具包是一个开源库，支持数据集和机器学习模型的可解释性与可解释分析。AI Explainability 360 Python 包包含一套全面的算法，涵盖了解释的不同维度以及代理解释性度量。AI Explainability 360 工具包支持表格、文本、图像和时间序列数据。 ...

ayaFlow

ayaFlow ayaFlow 是一个基于 Rust + eBPF 的网络流量分析工具，构建于 Aya 之上。它在每个 Linux 节点上运行一个代理，在入口和出口附加 TC 分类器，并暴露实时流量数据、基于 SQLite 的历史记录以及 Prometheus 指标。 功能 通过 eBPF TC 分类器捕获 IPv4、IPv6、TCP 和 UDP 流量。 在内存中维护实时连接统计信息，并将历史记录存储在 SQLite 中。 可选地使用反向 DNS、DNS 查询域名和 TLS SNI 增强流量信息。 暴露 REST API、WebSocket 流和 Prometheus /metrics...

essh

root@kitploit: ███████╗███████╗███████╗██╗ ██╗ ██╔════╝██╔════╝██╔════╝██║ ██║ █████╗ ███████╗███████╗███████║ ██╔══╝ ╚════██║╚════██║██╔══██║ ███████╗███████║███████║██║ ██║ ╚══════╝╚══════╝╚══════╝╚═╝ ╚═╝ 为拥有服务器集群的人打造的增强版 SSH 一个纯 Rust 编写的 SSH 客户端，带有高密度、Netwatch 风格的 TUI。支持多会话、...

scorecard

OpenSSF Scorecard...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

11in1 CMS 1.2.1 - Local File Inclusion (LFI)

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. dot dot in the class parameter to 1 index.php or 2 admin/index.php. id: CVE-2012-0996 info: name: 11in1 CMS 1.2.1 - Local File Inclusion LFI author: daffainfo...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

Apache Solr - Host Environment Variables Leak via Metrics API

Exposure of Sensitive Information to an Unauthorized Actor Vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users can specify which environment variables to hide, however, the default list is designed to wor...

CLEANSTART-2026-BR58082 Echo is a Go web framework

Multiple security vulnerabilities affect the kube-metrics-adapter package. Echo is a Go web framework. See references for individual vulnerability details...

CLEANSTART-2026-OB24504 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the kube-state-metrics package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: kube-state-metrics: kube-state-metrics-2.20.0-0.2.hum1 aarch64, x8664 kube-state-metrics-2.20.0-0.2.hum1.src src Security Fixes: kube-state-metrics: CVE-2026-71556...

bug-bounty-reports-desai-vinayak

🧩 Bug Bounty 报告 — Desai Vinayak 🔒 由 Desai Vinayak 编写的漏洞赏金和漏洞研究报告。 本仓库收集了用于协调披露 和修复跟踪 的被动、非破坏性 漏洞报告及辅助证据。 📁 目录 📂 reports/ — 每份报告的 PDF、DOCX 和证据文件： 🧠 BugBountyReportDesaiVinayakCVE-2023-50290.pdf — Apache Solr Metrics API 信息泄露（CVE-2023-50290 ）。 🌐 zscalerbugbountyreport.pdf — 针对选定的 zscaler.com...

CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...