GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

May 2026 Security Advisory Ivanti Virtual Traffic Manager (vTM) (CVE-2026-8051)

Summary Ivanti has released updates for Ivanti Virtual Traffic Manager which addresses one High severity vulnerability. Successful exploitation could lead to admin authenticated remote code execution. We are not aware of any customers being exploited by this vulnerability at the time of disclosur...

May 2026 Security Advisory Ivanti Secure Access Client (CVE-2026-7431, CVE-2026-7432)

Update 22 May: CVE-2026-8992 has been added to Vulnerability Details Summary Ivanti has released updates for the Ivanti Secure Access Client which addresses one medium severity vulnerability and two High severity vulnerabilities. We are not aware of any customers being exploited by these...

Security Advisory - Ivanti Xtraction (CVE-2026-8043)

Summary Ivanti has released an update for Ivanti Xtraction which addresses one Critical severity vulnerability. Successful exploitation could lead to sensitive information disclosure and client-side attacks. We are not aware of any customers being exploited by this vulnerability at the time of...

Security Advisory Ivanti Endpoint Manager (EPM) May 2026

Security Advisory Ivanti Endpoint Manager EPM CVE-2026-8109, CVE-2026-8110, CVE-2026-811 Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses one Medium severity and two High severity vulnerabilities. Successful exploitation could lead to information disclosure, privile...

Security Advisory Ivanti Endpoint Manager (EPM) August 2026

Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...

Security Advisory Ivanti DSM (CVE-2026-3483)

Security Advisory Ivanti DSM CVE-2026-3483 Summary Ivanti has released an update for Ivanti Desktop and Server Management DSM which addresses one high severity vulnerability. Successful exploitation could allow an attacker to elevate their local privileges. We are not aware of any customers being...

IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

CVE‑2026‑49975 – HTTP/2 Denial of Service Vulnerability

Status: EPMM unaffected Summary: CVE‑2026‑49975 is a denial‑of‑service DoS vulnerability affecting HTTP/2 implementations in several web servers. The issue allows an unauthenticated attacker to exhaust server memory using specially crafted HTTP/2 requests. EPMM / Sentry rely on Apache Tomcat for...

Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)

Created Date 09.06.2026 14:00:52...

Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-10727)

Update 11 June: FAQ Updated Summary Ivanti has released updates for Ivanti Endpoint Manager Mobile EPMM which addresses one high severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details CVE Number | Descriptio...

Security Advisory EPM February 2026 for EPM 2024

Update 18 Feb: Added FAQ on patching Agents. Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses one high severity vulnerability and one medium severity vulnerability. Successful exploitation could allow a remote authenticated attacker to leak arbitrary data or...

secfesc

root@kitploit: / / / / / / // / / / / // / / ///// /// Este proyecto utiliza IA como herramienta de desarrollo. Todo el código es revisado por humanos, probado y mantenido por el autor. Inicio Rápido...

CVE-2022-24834

Mejora del exploit público de CVE-2022-24834 Autor Conviso Research Team Descripción El equipo de Ricerca Security @RicercaSec descubrió y explotó con éxito una vulnerabilidad interesante CVE-2022-24834 en el intérprete de Lua incluido con Redis. Esta vulnerabilidad es un desbordamiento de heap e...

SMBRat

SMBRat Una Herramienta de Administración Remota para Windows en Visual Basic Script Idea Los Entornos Windows como las redes de Active Directory , se saturan bastante con el tráfico SMB. Todos los hosts reciben Políticas del SYSVOL , las configuraciones necesitan archivos remotos para funcionar,...

MacMaster

MacMaster：高级网络接口管理与监控 MacMaster 是一款专为网络专业人士和爱好者打造的综合性命令行工具。它是一款功能强大的实用程序，用于管理系统上网络接口的 MAC 地址。MacMaster 的设计兼顾简洁性和功能性，在增强网络匿名性、进行安全测试以及执行各种网络诊断和监控任务方面表现出色。无论您是想匿名化网络存在、排查连接问题，还是进行高级网络分析，MacMaster 都能为您提供高效完成这些任务所需的工具。 特性 自定义 MAC 地址： 为网络接口设置特定的 MAC 地址。 随机 MAC 地址： 生成并设置随机 MAC 地址。 恢复原始地址： 将 MAC...

wonitor

web 监控器 快速、零配置的 Web 端点变化监控器。用于比较响应，会将选定的 HTTP 标头列表和完整响应体存储在本地键值存储文件中。无需配置。 为了增加网络吞吐量，--worker 标志允许设置监控时的并发数。 返回 JavaScript 内容类型的端点默认会被美化。 添加 URL 时使用 --headersOnly 可以仅监控响应标头。 安装 通过 Go 或 二进制发布版 安装： root@kitploit: go get -u github.com/rverton/wonitor 使用 root@kitploit: λ $ ./wonitor NAME: wonitor - w...

zdr

Retención Cero de Datos ZDR para Proveedores de LLM Última actualización: abril de 2026 Una guía práctica para mantener tus datos privados al usar APIs de LLM. Cubre endpoints de retención cero, auto-alojamiento, requisitos de cumplimiento y patrones de protección de datos para ingenieros en...

awesome-appsec-interview

Awesome Entrevista AppSec Una lista curada de recursos, preguntas de práctica y materiales de estudio para ayudarte a prepararte para entrevistas de Ingeniero de Seguridad de Aplicaciones , organizadas por tipo de entrevista. Contenido Resumen de la Entrevista Revisión de Código Seguro Modelado d...

EpSiLoNPoInTlnk

README EpSiLoNPoInTlnk CVE-2026-21510 - .LNK Generator Tool for generating .lnk files exploiting the CVE-2026-21510 vulnerability Windows ShellLink Remote Code Execution. Designed for offensive security research, authorized penetration testing, and vulnerability analysis. Legal Warning ⚠️ THIS TOO...