punk.py

punk.py أداة استغلال لاحق لـ SSH في يونكس 1337 كيف يعمل punk.py هي أداة استغلال لاحق تهدف إلى مساعدة التنقل عبر الشبكة من جهاز يونكس مخترق. تقوم بجمع أسماء المستخدمين ومفاتيح SSH والمضيفات المعروفة من نظام يونكس، ثم تحاول الاتصال عبر SSH بجميع التركيبات التي تم العثور عليها. تمت كتابة punk.py للع...

Narthex

Narthex Narthex Griego: Νάρθηξ, νάρθηκας es un generador de diccionarios modular y minimalista para sistemas operativos Unix y similares a Unix escrito en C y Shell. Contiene programas autónomos al estilo Unix para la creación de diccionarios personalizados que pueden utilizarse para recuperación...

lynis

Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...

reverse-shell

reverse-shell रिवर्स शेल एक सेवा के रूप में - https://reverse-shell.sh याद रखने में आसान रिवर्स शेल जो अधिकांश Unix-जैसी प्रणालियों पर काम करना चाहिए। लक्ष्य पर उपलब्ध सॉफ्टवेयर का पता लगाता है और उपयुक्त पेलोड चलाता है। उपयोग 1. कनेक्शन सुनें अपनी मशीन पर एक पोर्ट खोलें और उस पर सुनें। आप netcat...

Shellshock

Shellshock Exploit CVE-2014-6271 Exploit Description This repository contains an exploit for a vulnerability that affects unix-based systems. Please note that this is merely a proof-of-concept script created for educational purposes and should be used responsibly. This exploit is designed to...

GHSA-528H-PC64-C93X vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2026-78897 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: langfuse-fips, vitess, langfuse, gitlab-rails-ce, unleash, nextcloud-server, tileserver-gl, keep-fips, wazuh-dashboard, opensearch-dashboards-fips, prism, unleash-proxy, tileserver-gl-fips, yaml-language-server, kibana, keep, gitlab-rails-ce-fips,...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, jitsucom-jitsu, lerna, langfuse, opensearch-dashboards...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: grafana-fips, commercial-grafana, grafana...

CVE-2026-55520

Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego.urlpattern.URLPattern.preparepatternforregex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so a directive containing many asterisks create...

CVE-2026-54548

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

CVE-2026-59981

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds pointer from the SampleCountChannel::ro...

Astra Linux – Vulnerability in Samba

Windows Kerberos Elevation of Privilege Vulnerability...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository vim/vim before version 9.0.1144...

CVE-2026-48750

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...

CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new projec...

CVE-2026-48754

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...

CVE-2026-48756

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...

CVE-2026-50190

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...