sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed a potential index out of bounds issue in the color transformation function. The issue could occur when the index ‘i’ exceeds the number of transfer function points TRANSFERFUNCPOINTS. The fix includes a...

failpoint

failpoint Golang 的 failpoints 实现。故障点用于以用户可控的方式在代码中添加可注入错误的位置。故障点是一段代码片段，仅当对应的故障点处于激活状态时才会执行。 快速开始（使用 failpoint-ctl） 1. 从源码构建 failpoint-ctl root@kitploit: git clone https://github.com/pingcap/failpoint.git cd failpoint make ls bin/failpoint-ctl 2. 向你的程序注入故障点，例如： root@kitploit: package main import...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

PiSavar

PiSavar - Detects PineAP module and starts deauthentication attack for fake access points - WiFi Pineapple Activities Detection About Project The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from bein...

FortiWeb - Cross Site Scripting

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points. id: CVE-2021-22122 info: name:...

sccm-http-looter

SCCM HTTP Looter 工作原理 SCCM 分发点（DP）是 Microsoft SCCM 用于托管软件安装、补丁、脚本部署等所用全部文件的服务器。默认情况下，这些服务器允许通过 SMB（TCP/445）和 HTTP/S（TCP/80 和/或 TCP/443）进行访问，并且需要某种类型的 Windows 身份验证（即 NTLM）。 当前的 SCCM DP 文件提取工具依赖于浏览 SMB 共享来收集文件的能力。 CMloot cmloot 然而，组织限制内部网络服务器上的入站 SMB 访问并不少见，并且阻止来自互联网的入站 SMB 访问也是标准做法。另一方面，HTTP/S...

CaptainHook

Captain Hook 它是什么？ 该工具的目的是追踪用户输入，以便发现进入敏感方法（如 java.lang.Runtime.exec、java.sql.Statement.executeQuery 等）的注入点，以及这些输入从注入点到方法调用之间发生的变异。 会生成“标记”（Marks），你必须在应用的每个可能的用户输入中插入这些标记。不同的标记将帮助你确定警报的来源。 受监控方法的列表可通过 CLI 中的 listbreakpoints 命令查看。该列表可通过 addbreakpoint 和 deletebreakpoint 命令进行修改。 架构 root@kitploit:...

veeam-velociraptor

Veeam Backup & Replication Velociraptor 工件 - PoC 本仓库包含一组 Velociraptor 工件，作为远程 Veeam Backup & Replication 取证管线的概念验证： artifacts/ 包含工件定义 tools/ 包含一个 qemu-img.zip 归档，可用于 Windows.QEMU.ImgConvert...

CVE-2026-87736

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

DEBIAN-CVE-2026-87736

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

EUVD-2026-74622

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

CVE-2026-87736

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

CVE-2026-87736

The mirage-crypto-ec package for OCaml, versions before 2.3.0 , contains an out-of-bounds read in EC public key handling for compressed points . The vulnerability is network-reachable with low complexity and requires low privileges, carrying a CVSS 3.1 score of 4.3 (MEDIUM) with a low availabilit...

Linux Distros Unpatched Vulnerability : CVE-2026-87736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. CVE-2026-877...

CVE-2020-1337

CVE-2020-1337 - 二进制植入（CVE-2020-1048 绕过） SafeBreach 的 Peleg Hadar @peleghd 和 Tomer Bar 因 CVE-2020-1048 而受到 Microsoft 致谢，该漏洞是 Windows 打印后台处理程序漏洞，可在 Windows 7 及更高版本上实现权限提升。 Alex Ionescu @aionescu 和 Yarden Shafir @yardenshafir 在其精彩的博客文章 PrintDemon: Print Spooler Privilege Escalation, Persistence &...

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana：对 CVE-2026-21724 的修复不完整，允许编辑者角色删除受保护的联系点 产品： Grafana（Grafana Labs）—— 13.2.0 及之前版本 文件： pkg/services/ngalert/provisioning/contactpoints.go CWE： CWE-284 — 访问控制不当 CVSS 3.1： AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N — 6.5（中危） CNA： Turan Security · CVE 记录 相关： CVE-2026-21724（本次被绕过的原始修...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31613 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns...

CVE-2026-77764

The GamiPress WordPress plugin before version 7.9.9.6 does not properly restrict its video watch-tracking functionality . A user with the Subscriber role (the lowest default WordPress role) can award configured gamification points, achievements, and ranks to arbitrary users—including administrato...