bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

BinGoo

,--="=--, / ." .-. "./ / ,/ : : /\ \ | /o\ :: /o\ | / -'| :=" "=: | \ / .-"-. \ | / .-"-. .--- --| /,.-'-.,\ |-- ---. /-===- / | / | | | | | | ' | | / \ / | | | | | | | | | | | | | || |/| || | || / / '-----v1--------------By-Hood3dRob1n----' root@kitploit: 欢迎阅读 BinGoo 的 README 文件！...

phpMussel

什么是 phpMussel？ 对于共享主机环境而言，这是一个理想的解决方案——当无法使用或安装传统的防病毒保护方案时，phpMussel 是一个 PHP 脚本，旨在基于 ClamAV 及其他签名，检测上传至系统（脚本挂钩处）文件中的木马、病毒、恶意软件及其他威胁 。 特性： 以 GNU General Public License version 2.0 GPLv2 授权。 易于安装、易于定制、易于使用。 适用于任何已安装 PHP+PCRE 的系统（无论操作系统，需 PHP+PCRE）。 可根据需求完全配置。 共享主机服务的理想解决方案。 需要文件上传保护的论坛系统的理想解决方案。 不 ...

CVE-2017-9798

CVE-2017-9798 Este pequeño script verifica un entorno de hosting compartido para CVE-2017-9798 y sale con un código de retorno 1 si se encuentra un archivo .htaccess vulnerable...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

reverseip_py

reverseippy Analizador de dominios para la búsqueda inversa de IP de IPAddress.com. Escrito en Python 3. ¿Qué es Reverse IP? Reverse IP se refiere al proceso de buscar todos los nombres de dominio que están alojados en una dirección IP particular. Esto puede ser útil por diversas razones, como...

CVE-2017-9798

Comprobar CVE-2017-9798 Este pequeño script comprueba un entorno de hosting compartido en busca de CVE-2017-9798 y termina con un código de retorno 1 si se ha encontrado un archivo .htaccess vulnerable. Ejemplo de uso root@kitploit: python check.py --path /var/customers/webs/...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 Mitigation Toolkit Defensive remediation, auditing, and verification toolkit for CVE-2026-54420 affecting LiteSpeed cPanel Plugin in shared hosting environments using CloudLinux / CageFS. ⚠️ Security Notice This repository is intended for system administrators, hosting providers, an...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 缓解工具包 面向 CVE-2026-54420 的防御性修复、审计和验证工具包，该漏洞影响使用 CloudLinux / CageFS 的共享主机环境中的 LiteSpeed cPanel 插件 。 ⚠️ 安全声明 本仓库仅面向系统管理员、托管服务提供商以及防御性安全研究人员 。 不包含任何利用代码、攻击性工具或武器化概念验证。 关于 CVE-2026-54420 CVE-2026-54420 影响某些版本的 LiteSpeed cPanel 插件 / WHM 插件 ，在共享主机环境中可能导致符号链接处理被滥用。 在易受攻击的配置下，低权限用户（例如通过受感染...

Shadow-Vault

Shadow Vault 🔐 Shadow Vault 是一款轻量级 PHP 网络工具，专为系统管理员 设计，用于在共享托管环境中安全地向 shadow 文件添加新的用户凭据。它会自动检测现有的 shadow 老化格式，使用 SHA-512 密码哈希，支持多种写入回退方法，甚至还提供了一键自动登录 cPanel 网络邮件（端口 2096）的功能。 ⚠️ 免责声明 ：此工具仅用于合法的服务器管理 。在您并不拥有的系统上进行未经授权的访问或使用是违法的。请自行承担使用风险。 功能 ✅ SHA-512 密码哈希 ，使用随机盐（$6$） ✅ 动态 shadow 老化检测 ——...

PYSEC-2026-2532 Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the getospath function within jupyterserver/services/contents/fileio.py. The check uses startswithroot without appending a trailing path separator, allowing sibling...

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 18, 2026. The vulnerability in questi...

CVE-2026-54420

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

CVE-2026-54420

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

CVE-2026-54420

CVE-2026-54420 is a symlink-following vulnerability in LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM Plugin before 5.3.2.0). A user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS can abuse improperly validated symbolic links to access or ...

EUVD-2026-36657

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

CVE-2026-54420

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

PT-2026-49104

Name of the Vulnerable Software and Affected Versions LiteSpeed cPanel plugin versions prior to 2.4.8 LiteSpeed WHM PlugIn versions prior to 5.3.2.0 Description A privilege escalation issue exists where the software mishandles symbolic links symlinks provided by a user with FTP or web shell acces...

CVE-2026-5422

A flaw was found in jupyter-server. This path traversal vulnerability exists due to insufficient validation of file paths, specifically an incorrect root directory boundary check and improper handling of directory traversal sequences. This allows a remote attacker with low privileges to bypass...

EUVD-2026-33905

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the getospath function within jupyterserver/services/contents/fileio.py. The check uses startswithroot without appending a trailing path separator, allowing sibling...