agentwatch

agentwatch Claude Code セッションのフライトレコーダーです。 Claude Code をマシン上で実行させるときがあります — 何時間も、あるいは自動承認で動かし続けることもあります。agentwatch はすべてのアクションを静かに記録し、後で正確に何が起こったかを確認できます。 root@kitploit: npm install -g agentwatch-dev agentwatch install これだけです。たった2つのコマンドで、agentwatch がすべての Claude Code セッションを記録します。 実際に使うコマンド...

trunk-recorder

赞助商 你觉得 Trunk Recorder 和 OpenMHz 有用吗？ 成为赞助商，帮助支持持续的开发和运营！ 感谢所有做出贡献的人！ 🎉 V5.2 现已发布……这是我们迄今最好的版本！！ 感谢所有贡献代码、参与测试并帮助收集核心转储文件的人！ 概述 需要帮助？有能用的方案？分享出来吧！ Discord 服务器 文档 ……别忘了还有维基 Trunk Recorder 能够录制集群和常规无线电系统上的通话。它使用一个或多个软件定义无线电（SDR）来完成这项工作。SDR 捕获大范围的射频（RF）信号，然后通过软件处理接收到的内容。GNU Radio...

NUUO Camera <=20250203 - OS Command Injection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. id: CVE-2025-1338 info: name: NUUO Camera =20250203 - OS Command Injection author: Ark...

AVTECH DVR - Login Verification Code Bypass

AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...

AsyncRAT-C-Sharp

AsyncRAT AsyncRAT 是一款远程访问工具（RAT），旨在通过安全的加密连接远程监控和控制其他计算机 包含的项目 本项目包含以下内容 用于发送和接收命令的插件系统 用于控制客户端的访问终端 可通过终端管理的可配置客户端 记录所有重要事件的日志服务器 功能包括： 客户端屏幕查看与录制 客户端杀毒与完整性管理器 客户端SFTP访问（包括上传和下载） 客户端与服务器聊天窗口 客户端动态DNS与多服务器支持（可配置） 客户端密码恢复 客户端JIT编译器 客户端键盘记录 客户端反分析（可配置） 服务器控制的更新 客户端反恶意软件启动 服务器配置编辑器 服务器多端口接收器（可配置）...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

CVE-2026-2964-Lab

CVE‑2026‑2964 实验室 – 原型污染到远程代码执行 本仓库包含一个完整的 CVE‑2026‑2964 实验室环境，该漏洞是 web‑audio‑recorder‑js 库中的一个原型污染漏洞，在特定条件下可导致远程代码执行。 该实验室包含： 一个易受攻击的服务器（index-vulnerable.js），用于演示攻击链。 一个已修复的服务器（index-fixed.js），实现了适当的清理和允许列表验证。 直接从 GitHub 仓库拉取的原版易受攻击库代码。 通过单条命令即可完成环境搭建的脚本。 前置要求： Node.js（版本 18 或更高） npm（随 Node.js...

CVE-2026-17483

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...

CVE-2026-17483 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...

CVE-2026-17483

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by an improper authorization flaw (CWE-285) in an SQL procedure, allowing a local attacker to delete historical flight-recorder archives. The CVSS v3.1 score is 4.3 (Medium) with a network vector, low complexity, and low privileges requ...

Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes

ImpactThe proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a case the configuration is vulnerable to th...

MINI-PVR7-G636-7P38

Bulletin has no description...

CVE-2026-40425

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

CVE-2026-44611

Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks...

CVE-2026-42941

The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change...

CVE-2026-42929

Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials...

CVE-2026-44611

Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks...

CVE-2026-42951

An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes...

CVE-2026-42941

The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change...

CVE-2026-42929

Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials...