binfinder

binfinder Trova i file binari non installati tramite il gestore pacchetti Prerequisiti Software versione di go = 1.12 versione di docker = 19 Come compilare ed eseguire binfinder Compilazione root@kitploit: $ make build Una volta completata la compilazione, puoi eseguire bindfinder lanciando:...

CVE-2026-55588

A flaw was found in ORAS OCI Registry As Storage CLI. A remote attacker, by operating a malicious OCI Open Container Initiative registry that returns a cyclic referrer graph, could cause unbounded recursion and memory growth in the client. This vulnerability leads to a client-side Denial of Servi...

RpcAuthnLevelPrivacyEnabled

Verwaltung der Bereitstellung von Änderungen an der RPC-Druckerzuordnung für CVE-2021-1678 KB4599464 Windows-Druckerfreigabefehler, herunterladen und ausführen: https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled/blob/main/RpcAuthnLevelPrivacyEnabled.reg QUELLENANGABE:...

RustyWater-ShellCode-Dropper

RustyWater ShellCode Dropper RustyWater stellt die Hauptnutzlast und das Rückgrat des gesamten Angriffsbetriebs der Static-Kitten-Gruppe dar. RustyWater ist eine in Rust kompilierte ausführbare Datei getarnt als reddit.exe mit einem gefälschten Cloudflare-Symbol, bekannt als RustyWater oder mit...

Linux Distros Unpatched Vulnerability : CVE-2026-55588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referr...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hivex (UTSA-2026-093175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093175 advisory. A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could input a...

CVE-2026-55588 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

CVE-2026-55588 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

CVE-2026-55588

ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...

cve-2013-3900-winverifytrust-mitigation

Mitigazione CVE-2013-3900 WinVerifyTrust / EnableCertPaddingCheck Questo repository contiene uno script di remediation e verifica PowerShell che risolve la segnalazione Tenable/Nessus: Plugin ID: 166555 Nome: Mitigazione della convalida della firma WinVerifyTrust CVE-2013-3900...

adiskreader-secretsdump

🚩 Sponsor Se ti piace questo progetto, considera l'acquisto di licenze di OctoPwn, la nostra suite completa di pentesting che gira nel tuo browser! Per notifiche su nuove build/versioni e altre informazioni, unisciti al nostro Discord adiskreader-secretsdump Estrai i segreti del registro e NTDS d...

Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation

A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document containing attacker-controlled import...

Important: Red Hat Security Advisory: Apicurio Registry (container images) release and security update [ 3.3.1 GA ]

An update to the images for Red Hat build of Apicurio Registry is now available from the Red Hat Container Catalog. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of...

Apicurio/apicurio-registry: apicurio-registry: Unhardened SAXParser in content-type detection leads to blind XXE / SSRF / billion-laughs DoS

A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission or unauthenticated when the registry runs with default...

Apicurio/apicurio-registry: apicurio-registry: XML entity-expansion denial of service via internal DTD subset

A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURESECUREPROCESSING. An attacker with artifact-write permission can upload XML documents with internal entity-expansion payloa...

vulnerability-remediation-cve-2013-3900

🛡️ Behebung von CVE-2013-3900: WinVerifyTrust-Signaturvalidierung 📝 Projektübersicht Dieses Projekt demonstriert einen realen Workflow für das Schwachstellenmanagement. Mit einer Azure-VM habe ich einen Signaturvalidierungsfehler mit hohem Schweregrad aufgespürt, ihn manuell per PowerShell...

CVE-2026-59296

A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary...

tanstack-compromise-checker

tanstack-compromise-checker Rileva indicatori dell'attacco alla supply-chain npm di TanStack su una macchina sviluppatore, un repository o un runner CI. Script Bash, immagine Docker e GitHub Action — stesso motore, tre punti di ingresso. CVE-2026-45321 /GHSA-g7cv-rxg3-hmpx L'11 maggio 2026, gli...

CVE-2024-37032

CVE-2024-37032 Path traversal in Ollama con server di registro malintenzionato Scopri di più su Probllama: vulnerabilità di esecuzione remota di codice in Ollama CVE-2024-37032 – Panoramica e mitigazioni Ambiente di vulnerabilità root@kitploit: docker run -d -v ollama:/root/.ollama -p 11434:11434...

PT-2026-81849

Name of the Vulnerable Software and Affected Versions ORAS CLI versions prior to 1.3.3 Description Recursive referrer traversal fails to track visited descriptors, allowing a malicious OCI registry to return a cyclic referrer graph. This leads to unbounded recursion and memory growth, resulting i...