vimana-framework

This project is now hosted here: https://github.com/s4dhulabs/vimana-framework...

staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

CVE-2024-9162

CVE-2024-9162 All-in-One WP Migration and Backup SELECT optionname,optionvalue FROM wpoptions WHERE optionname='ai1wmsecretkey'; +------------------+--------------+ | optionname | optionvalue | +------------------+--------------+ | ai1wmsecretkey | PwrqqK3UHQJo | +------------------+-------------...

IMDShift

IMDShift AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks...

skiptracer

Аккаунт перенесен на: https://gitlab.com/illwill В настоящее время не поддерживается. Миграция на Python 3 в процессе, пожалуйста, пока не сообщайте об ошибках, так как код и источники нуждаются в доработке. Проект перенесен на https://gitlab.com/illwill/skiptracer...

CANToolz

H1 PROJECT IS MOVED HERE: https://github.com/CANToolz/CANToolz More details: https://asintsov.blogspot.de/2017/08/next-page-in-cantoolz-life.html...

attackintel

ОБНОВЛЕНИЕ 26 Nov 2018 MITRE объявил о прекращении поддержки API ATT&CK и вскоре полностью откажется от него. Организация перешла на использование STIX. Мой код останется доступным для ознакомления, но вы можете воспользоваться моим веб-приложением ATT&CK Intel, которое находится на начальной...

domain-protect

domain-protect Domain Protect は現在 OWASP プロジェクト 移動先: github.com/domain-protect/domain-protect...

deepsecrets

DeepSecrets — лучший инструмент для поиска секретов !WARNING Активная разработка была перенесена в форк автора по адресу https://github.com/ntoskernel/deepsecrets. Этот репозиторий не будет получать обновления...

All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to unauthenticated information disclosure due to its error.log file being publicly accessible in versions before 7.87. id: CVE-2024-8852 info: name: All-in-One WP Migration 7.87 - Unauthenticated Information Disclosure...

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...

WordPress Backup Migration <= 1.3.6 - Path Traversal

WordPress Backup Migration plugin versions up to 1.3.6 contain a path traversal and file validation issue in handledownloading function, letting unauthenticated attackers download backup files containing sensitive information. id: CVE-2023-6266 info: name: WordPress Backup Migration = 1.3.6 - Pat...

WordPress 1 Click Migration Plugin < 2.3 - Information Exposure

The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data includi...

WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting

WordPress All-in-One WP Migration plugin 7.62 and prior contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials a...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

killerbee

KillerBee ================ KillerBee — это платформа и инструменты для тестирования и аудита сетей ZigBee и IEEE 802.15.4 Уведомление Поддержка usb0.x устаревает/удаляется Поддержка Apimote v1 устаревает/удаляется Если вам нужны эти функции, пожалуйста, создайте issue, чтобы объяснить ваш вариант...

CVE-2026-89459

A flaw was found in the Linux kernel's s390/percpu component. This vulnerability arises when the kernel is compiled with older versions of GNU as prior to binutils 2.39. A parsing error prevents a crucial instruction from being correctly processed, which can lead to issues with system resource...

CVE-2026-89755

A flaw was found in the Linux kernel's device migration mechanism. When a memory page is freed from the swap cache, a stale mapping of that page might still be used. This incorrect memory accounting can lead to a system crash or instability...

CVE-2026-89758

A flaw was found in the Linux kernel's memory management subsystem. When an HMM-based Graphics Processing Unit GPU driver migrates a Transparent Huge Page THP to device memory, it can leave a device-private Page Middle Directory PMD entry. If a user-space application then attempts to manage this...

CVE-2026-89756

A flaw was found in the Linux kernel. When performing memory migration on KVM Kernel-based Virtual Machine hosts, the migratepagesbatch function fails to report RCU Read-Copy Update tasks quiescent states during large batch unmapping operations. This oversight causes the migrating task to become ...