7557 matches found
Paranoid-Copy-Fail-CVE-2026-31431
root@kitploit: ================================ Paranoid AFALG hardening script ================================ Blocks all user-space kernel crypto interfaces AFALG + algif modules Mitigates CVE-2026-31431 and reduces future attack surface Safe for normal systems SSH, TLS, LUKS, WireGuard Only...
CVE-2020-1611
Juniper Junos Space prior to 19.4R1 Local File Inclusion Vulnerability CVE-2020-1611 PoC Juniper Junos Space prior to 19.4R1 is vulnerable to a local file inclusion vulnerability. An attacker with normal user rights could exploit this vulnerability. The "Download Report" function is vulnerable...
Detection-and-Mitigation-for-CVE-2022-2639
Detection-and-Mitigation-for-CVE-2022-2639 Description The Open vSwitch kernel module allows flexible userspace control over flow-level packet processing on selected network devices. It can be used to implement a plain Ethernet switch, network device bonding, VLAN processing, network access...
Cairn
Cairn More Than Just AI Penetration Testing — Towards General State-Space Search Cairn is a general-purpose problem-solving engine. It defines no roles, no workflows. Given an origin and a goal, it searches for a path through an unknown state space. AI Penetration Testing is one such problem — an...
django-cve-2020-13254
Django CVE-2020-13254 This repository demonstrates exploitation of CVE-2020-13254 in two ways – via a web interface and via a failing test case. For more details visit: https://danpalmer.me/2020-06-07-django-memcache-vulnerability/ Exploiting via the web The example provides a web interface with ...
usbpcap
USBPcap - USB Packet capture for Windows End-user installer is available at: http://desowin.org/usbpcap Following informations are intended for developers and power users only. Directory overview: USBPcapCMD - sample user space application USBPcapDriver - filter driver used to capture data Build...
vLLM 0.8.3 - 0.14.0 - Information Disclosure
vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images. id: CVE-2026-22778 info: name: vLLM 0.8....
Lfi-Space
🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇...
PF_RING
PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...
fierce
Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...
litefuzz
litefuzz Un fuzzer multiplataforma para probar binarios en espacio de usuario, clientes y servidores. Ha encontrado errores en más de 50 aplicaciones y bibliotecas de empresas importantes y código abierto. Configuración simple para comenzar a fuzzear en Linux, Mac y Windows. litefuzz intro why ho...
CVE-2014-4377
CoreGraphics Memory Corruption - CVE-2014-4377 Apple CoreGraphics library fails to validate the input when parsing the colorspace specification of a PDF XObject resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input in any...
CVE-2026-79602
A flaw was found in Xen. A malicious guest operating system, when configured with a PCI device that has a Base Address Register BAR mapped to the I/O port space, can trigger an internal error within the Xen hypervisor. This vulnerability could lead to a denial of service, causing the host system ...
pbscan
RESUMEN polarbearscan es un intento de realizar un escaneo de puertos y captura de banners más rápido y eficiente. Combina dos ideas diferentes que, con suerte, lo harán merecedor de su atención y tiempo. La primera de estas ideas es utilizar escaneo SYN sin estado usando cookies criptográficamen...
CVE-2022-45472
CVE-2022-45472 DOM Based XSS Software: CAE Learning Space Enterprise with Intuity License Image Version: 267r Patch Level: 639 Vulnerability: DOM Based XSS Description The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a...
gitbleed_tools
GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...
usbsas
usbsas 是一个免费开源（GPLv3）工具和框架，用于安全地读取不受信任的 USB 大容量存储设备。 概述 遵循深度防御和最小权限原则，usbsas 的目标是减少 USB 栈的攻击面。为此，大多数通常在（特权）内核空间中执行的 USB 相关任务（解析 USB 数据包、SCSI 命令、文件系统等）已被移至用户空间，并分离到不同的进程中（微内核风格），每个进程在其受限的 seccomp（安全计算模式）中执行。它运行在 GNU/Linux 上，采用 Rust 编写。 使用场景 自助终端 / 浸羊站，用于安全地将文件从不受信任的 USB 设备传输到受信任的设备 对不受信任的 USB...
CVE_2022_46395_Gazelle
Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...
maskprocessor
maskprocessor Generador de palabras de alto rendimiento con un conjunto de caracteres configurable por posición Ataque por máscara Intenta todas las combinaciones de un espacio de claves dado, igual que en el ataque de fuerza bruta, pero más específico. Ventaja sobre la fuerza bruta La razón para...
