CVE-2024-4367-hands-on-01

!IMPORTANT Этот репозиторий предназначен для изучения уязвимостей. Обязательно выполняйте этот практикум только на подходящем компьютере, находящемся под вашим управлением. Категорически запрещается совершать противоправные действия. Автор не несёт ответственности за любой ущерб, возникший в...

CVE-2024-4367-hands-on

!IMPORTANT Este repositório destina-se ao aprendizado de vulnerabilidades. Este hands-on deve ser realizado, obrigatoriamente, em um computador adequado que esteja sob seu controle. Não pratique atos ilegais de forma alguma. Além disso, o autor não se responsabiliza por quaisquer danos ou...

metasploit-framework-nu11secur1ty

Metasploit Framework Metasploit Framework — это инструмент с открытым исходным кодом, выпущенный под лицензией BSD. Подробную информацию о лицензировании можно найти в файле COPYING. Последняя версия Загрузите последнюю версию Metasploit со страницы Nightly Installers. Документация Полная...

Hulios

Hulios Sistema Onion e Invisibilità Linux Universale Indurito Hulios è un gateway VPN Tor trasparente per Linux basato su eBPF. Protegge il traffico di rete in uscita reindirizzando i socket TCP e le query DNS attraverso un'istanza integrata di Arti client Tor e un resolver DNS localizzato basato...

cargo-fuzz

cargo fuzz Un sottocomandocargo per il fuzzing con libFuzzer! Facile da usare! Installazione root@kitploit: $ cargo install cargo-fuzz Nota: libFuzzer richiede il supporto dei sanitizer LLVM, quindi funziona solo su x86-64 e Aarch64, e solo su sistemi operativi Unix-like non Windows. Richiede anc...

SharpCollection

SharpCollection Build notturne dei comuni strumenti offensivi in C, prelevati freschi dai rispettivi rami master, compilati e rilasciati in modalità CDI tramite le release pipeline di Azure DevOps. Manca il tuo strumento preferito? Sentiti libero di aprire una issue o di mandarmi un DM su X...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

!IMPORTANT This repository is intended for learning about...

GHSA-2H46-9X5W-4WF7 Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind

Impact A path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint rewind to write attacker-controlled transcript data outside of the expected session...

EUVD-2026-36742

Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a remote Collection could lead to attackers bypassing the check and faking consent. An attacker could forge the...

PT-2026-49260

Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.6.0 Description A missing condition in the verification process for remote accounts consenting to be featured in a remote Collection allows attackers to bypass checks and fake consent. An attacker can forge the...

Malicious Package

Overview ecto-nightly-spirit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in ecto-nightly-spirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dea0702101217f4a918a23191023bbd9e7d3b5478028bb0868341a574526e97 On npm install, postinstall.js executes unconditionally and performs three installer-harming actions. 1 It enumerates every key/value pair in...

MAL-2026-5688 Malicious code in ecto-nightly-spirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dea0702101217f4a918a23191023bbd9e7d3b5478028bb0868341a574526e97 On npm install, postinstall.js executes unconditionally and performs three installer-harming actions. 1 It enumerates every key/value pair in...

Malicious code in whiteboard-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae14bab8e5a11636f7a395fccf88119f5294c3639c8f71b6b2e3f199282bb584 On npm install, scripts/postinstall.js fetches a companion-- binary from github.com/palmthree-studio/whiteboard-agent/releases/download/nightly/... —...

PT-2026-34552

Name of the Vulnerable Software and Affected Versions LiteLLM version 1.18.10 Description An architectural flaw in the MCP server creation functionality allows for remote code execution. The application permits users to add MCP servers through a JSON configuration where arbitrary values can be...

Fedora 42 : cef (2026-6188cc51be)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6188cc51be advisory. Update to cef-146.0.9+g3ca6a87 + chromium 146.0.7680.164 High CVE-2026-4673: Heap buffer overflow in WebAudio High CVE-2026-4674: Out of bounds read...

Exploit for OS Command Injection in Cacti

CVE-2022-46169 Reproduction Template Project Structure -...

CVE-2026-30976

Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files containing API keys and database credentials, Windows...

EUVD-2026-15992

Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files containing API keys and database credentials, Windows...

PT-2026-28129

Name of the Vulnerable Software and Affected Versions Sonarr versions prior to 4.0.16.2942 Description Sonarr is a PVR for Usenet and BitTorrent users. A flaw exists where authentication could be bypassed in versions with authentication disabled for local addresses Authentication Required set to:...