tetragon v1.7.1

Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...

CVE-2024-34225

نظام إدارة معمل الحاسوب باستخدام PHP وMySQL الإصدار 1.0 مقدم من: Kha Do الثغرة البرمجة النصية عبر المواقع Cross Site Scripting الوصف ثغرة البرمجة النصية عبر المواقع في php-lms/admin/?page=systeminfo في نظام إدارة معمل الحاسوب باستخدام PHP وMySQL الإصدار 1.0 تسمح للمهاجمين عن بُعد بحقن نصوص برمجية...

BlobRunner

BlobRunner BlobRunner est un outil simple pour déboguer rapidement le shellcode extrait lors de l'analyse de logiciels malveillants. BlobRunner alloue de la mémoire pour le fichier cible et saute à la base ou au décalage de la mémoire allouée. Cela permet à un analyste de déboguer rapidement les...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself. The findings were shared with The Hacker News ahead of...

CVE-2020-28351

Attaque de script intersite réfléchie sur ShoreTel 19.46.1802.0 Le composant de conférence des appareils Mitel ShoreTel 19.46.1802.0 pourrait permettre à un attaquant non authentifié de mener une attaque de script intersite réfléchie XSS via le PATHINFO vers index.php, en raison d'une validation...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

GHSA-5R34-2G38-6569 praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...

spiderfoot

SpiderFoot é uma ferramenta de automação de inteligência de fontes abertas OSINT. Ela se integra com praticamente todas as fontes de dados disponíveis e utiliza uma variedade de métodos para análise de dados, tornando esses dados fáceis de navegar. O SpiderFoot possui um servidor web embutido par...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.35 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

NMapGUI

Codacy Badge NMapGUI est une interface graphique avancée pour l'outil d'analyse réseau NMap. Elle permet d'étendre et de faciliter l'utilisation typique de NMap en offrant une interface visuelle et rapide avec l'application. CE PROJET N'EST PLUS MAINTENU - Pour l'instant, Java8 est requis. Les...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.30 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.11 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.11 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

CVE-2022-0185-Case-Study

CVE-2022-0185 案例研究 本案例研究是ECE 9069课程“黑客入门”的一个作业成果：https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 概述 CVE-2022-0185 是一个基于堆的缓冲区溢出漏洞，存在于 Linux 内核文件系统上下文（Filesystem Context）功能中的 legacyparseparam 函数验证所提供的参数长度的方式中。一个非特权本地用户（如果启用了非特权用户命名空间，则不需要；否则需要命名空间的 CAPSYSADMIN 权限），能够打开一个不支持文件系统上下文...

overwrite

लारावेल नोवा के लिए एक आसान और पूर्ण फ्लेक्सिबल फील्ड, बार-बार और लचीले फील्ड समूहों के लिए उपयुक्त। त्वरित शुरुआत यहाँ एक बहुत ही संक्षिप्त गाइड है जो आपको जल्द से जल्द शुरू करने में मदद करेगा। पूर्ण दस्तावेज़ देखें https://whitecube.github.io/nova-flexible-content पर इंस्टॉल करें root@kitploit:...

CVE-2020-1206

في ثغرة SMBGhost CVE-2020-0796 تحدثت عن تقنية write-what-where primitive من خلال استخدام خطأ تجاوز عدد صحيح integer overflow لتغيير المؤشر Alloc.Userbuffer ليشير إلى عنوان نريده وكتابة بيانات عشوائية فيه. على غرار SMB Ghost، توجد هذه الثغرة أيضًا في دالة Srv2DecompressData في srv2.sys. دعنا نراجع...

gotestwaf

GoTestWAF GoTestWAF é uma ferramenta para simulação de ataques API e OWASP que suporta uma ampla gama de protocolos API, incluindo REST, GraphQL, gRPC, SOAP, XMLRPC e outros. Foi projetada para avaliar soluções de segurança de aplicações web, como proxies de segurança API, Firewalls de Aplicação...