rhabdomancer v0.10.0

rhabdomancer "The road to exploitable bugs is paved with unexploitable bugs." -- Mark Dowd Rhabdomancer is a blazing fast IDA headless plugin that locates calls to potentially insecure API functions in a binary file. Auditors can backtrace from these candidate points to find pathways allowing...

regipy v6.3.0

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

D4N155 v1.3.1

OWASP D4N155 BUG: Extract urls by domain dont work. Crawler Google stop. I'll fix It's an information security audit tool that creates intelligent wordlists based on the content of the target page. Help us, See some calculations used Ongoing projects 👷: D4N155 in docker 🎁, Web API D4N155 ☁️,...

cornucopia pre-release

OWASP Cornucopia project OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams Identify security requirements in Agile, conventional, and formal development processes. It is language, platform, and technology agnostic. Visit: https://cornucopia.owasp.org/...

Awesome-Bug-Bounty-Tools-Contents

Awesome-Bug-Bounty-Tools-Contents A comprehensive Bug Bounty a...

cdncheck v1.2.49

cdncheck Features • Installation • Usage • Join Discord root@kitploit: cdncheck is a tool for identifying the technology associated with dns / ip network addresses. Features CDN , CLOUD and WAF Detection Easy to use as library Easily extendable providers IP, DNS input support Text, JSONL output...

whosthere v0.8.3

Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...

RLSA-2026:56973 Important: mysql:8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026...

mysql:8.4 security, bug fix, and enhancement update

An update is available for module.mysql, rapidjson, module.mecab-ipadic, mysql, mecab-ipadic, module.rapidjson, mecab, perl-DBD-MySQL, module.mecab, module.perl-DBD-MySQL. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Oracle Linux 9 : ansible-core (ELSA-2026-57149)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57149 advisory. 1:2.14.18-3.1 - Fix CVE-2026-11332 prevent arbitrary git configuration via role requirements RHEL-194134 Tenable has extracted the preceding description block...

RockyLinux 9 : mysql:8.4 (RLSA-2026:56973)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56973 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

Elasticsearch 8.x < 8.19.20 / 9.0.x < 9.4.5 / 9.5.x < 9.5.1 Multiple Vulnerabilities (ESA-2026-78 / ESA-2026-79 / ESA-2026-116)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-78, ESA-2026-79, and ESA-2026-116 advisories. - Memory Allocation with Excessiv...

Oracle Linux 8 : perl:5.32 (ELSA-2026-48225)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-48225 advisory. - Fix CVE-2025-40909 - Clone dirhandles without fchdir perl-Algorithm-Diff - Fix CVE-2026-9538: Denial of Service via crafted tar header with large entry size...

Security update for gitea-tea (important)

openSUSE security update: security update for gitea-tea ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21603-1 Rating: important References: bsc1234598 bsc1235367 bsc1239493 bsc1241819 bsc1251471 bsc1251663 bsc1253576 Cross-References: CVE-2024-453...

CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability...

RHEL 10 : kernel (RHSA-2026:57251)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57251 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bound...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21593-1 Rating: important References: bsc1255111 bsc1266609 bsc1275024 bsc1275025 bsc1275026 bsc1275028 bsc1275029 bsc1275032 bsc1275033 bsc1275034...

Linux Distros Unpatched Vulnerability : CVE-2026-76222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths...

PT-2026-80305

Unbounded Multipart Cookie Allocation DoS in vouch-proxy Summary vouch-proxy v0.47.2 contains an unauthenticated remote denial-of-service vulnerability in its multipart cookie reassembly logic. The /validate endpoint parses the total cookie part count directly from the attacker-controlled cookie...

JetBrains IntelliJ IDEA < 2026.1.5 Git Credential Disclosure

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.5. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains IntelliJ IDEA before 2026.1.5 Git credentials were written in plaintext to the IDE log. CVE-2026-75057 Note that Nessus h...