bluffs

BLUFFS Introducción Este repositorio contiene código relacionado con BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. Resumen del artículo Bluetooth es una tecnología omnipresente para la comunicación inalámbrica. Miles de millones de dispositivos lo utilizan en aplicaciones...

CVE-2024-24576-PoC

CVE-2024-24576 PoC Command::arg 和 Command::args API 在文档中声明，参数将原封不动地传递给派生进程，无论参数内容如何，并且不会被 shell 求值。这意味着将不受信任的输入作为参数传递应该是安全的。 在 Windows 上，此实现的复杂度高于其他平台，因为 Windows API 仅提供一个包含所有参数的单一字符串给派生进程，由派生进程自行拆分。大多数程序使用标准 C 运行时 argv，实际上会导致参数拆分方式基本一致。 但有一个例外是...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

ptf

渗透测试者框架 PTF 一个 TrustedSec 项目 - 版权所有 2022 作者：David Kennedy @HackingDave https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave 渗透测试者框架 PTF 是一个 Python 脚本，专为基于 Debian/Ubuntu/ArchLinux 的发行版设计，旨在创建类似且熟悉的渗透测试发行版。作为渗透测试者，我们习惯于使用 /pentest/ 目录或我们自己经常需要保持最新状态的工具集。我们有一些经常使用的“首选”工具，使用最新最好的版本非常重要。 PTF...

CVE-2018-0952-SystemCollector

SystemCollector Windows 10 诊断中心标准收集器服务中权限提升的概念验证（PoC） 受影响产品 Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 摘要 由于 DiagnosticsHub.StandardCollector.Runtime.dll 中缺少客户端模拟功能，Windows 标准收集器服务所使用的诊断中心打包库可以被强制将任意文件复制到任意位置。 以下是关于如何发现和利用此漏洞的详细说明：Windows...

r2rs

\ / / |/ //|/ \ | | / | | / || / | / / / / / / react2rubyshell !IMPORTANT 免责声明：因使用本脚本而采取的任何行动，其责任完全由执行者本人承担。请仅对您拥有或已获明确许可进行测试的系统使用本脚本。 环境要求 本地安装 Ruby Ruby 标准库：json、net/http、optparse、readline、securerandom、shellwords、uri 无需任何外部 gem。 安装 克隆仓库，进入项目目录，然后使用 Ruby 运行脚本： root@kitploit: git clone...

OWASP-Model-Card-Security-Standard

Estado: Borrador — Proyecto de OWASP en incubación Este estándar está en desarrollo activo. Las contribuciones y los comentarios son muy bienvenidos. ¿Qué es esto? Cuando descargas un modelo preentrenado de HuggingFace o de cualquier otro repositorio, estás confiando esencialmente en una caja...

OWASP-Open-Source-Intelligence-Standard

Open-source intelligence now informs decisions that affect liberty, safety, and national security. OOVS is an open standard that makes those decisions defensible. Every judgment traceable to its origin · every requirement testable against published criteria · AI output never mistaken for evidence...

AAMVA-PDF417-Vulnerability-Research

Investigación de Vulnerabilidad en Validación de PDF417 ID Resumen Este repositorio contiene una investigación de seguridad exhaustiva que documenta vulnerabilidades críticas en sistemas de validación de código de barras PDF417 estándar AAMVA que afectan a identificaciones gubernamentales,...

linux-4.1.15_CVE-2017-1000371

Linux内核发行版 4.x http://kernel.org/ 这些是Linux 4.x版本的发行说明。请仔细阅读，因为它们告诉您这是什么，解释如何安装内核，以及如果出现问题该怎么办。 什么是Linux？ Linux是Unix操作系统的克隆，由Linus Torvalds从零开始编写，并得到了来自网络上一群松散组织的黑客的帮助。它旨在符合POSIX和单一UNIX规范。 它具有您期望在现代完整功能的Unix中拥有的所有特性，包括真正的多任务处理、虚拟内存、共享库、按需加载、写时复制可执行文件、正确的内存管理以及包括IPv4和IPv6的多栈网络。...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

Agent-Skills-Security-Standard

此存储库没有 README。...

Important: Red Hat Security Advisory: osbuild-composer security, bug fix, and enhancement update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-31431

CVE-2026-31431 Binario estándar de CopyFail Obtén todas las alertas de nuevos CVE en https://exploitroom.com root@kitploit: mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, fo...

Search-log4Jvuln-AppScanSTD

Buscar vulnerabilidad log4J usando AppScan Standard y una lista de sitios web Este script de Powershell ejecuta escaneos de AppScan Standard contra una lista de sitios web URLs.txt verificando solo la vulnerabilidad Log4J CVE-2021-44228. Estructura del proyecto: Después de ejecutar el script, lee...

RLSA-2026:65116 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs...

Important: Red Hat Security Advisory: delve security update

An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...