1089295 matches found
RLSA-2026:66364 Important: git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...
git-lfs security update
An update is available for git-lfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...
CVE-2024-3094-Checker
CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful Bash script designed for Linux systems. It identifies vulnerability to CVE-2024-3094, related to XZ/LZMA utilities. This script is essential for system administrators and security professionals to quickly assess and mitigate potential...
Stowaway
Stowaway Stowaway is a multi-hop proxy tool for security researchers and penetration testers. Stowaway lets you proxy external traffic through multiple hops into a target internal network, bypassing access restrictions, building a tree-like node topology, and managing it easily. Thanks for the...
hoverfly
API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...
Sn1per
Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per β The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace β whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...
CVE-2025-9216
StoreEngine β Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More = 1.4.0 - Authenticated Subscriber+ Arbitrary File Upload The StoreEngine plugin contains a vulnerability in it's CSV Import/Export feature that allows any authenticated user subscriber, author,...
heroku-CVE-2013-0269
heroku-CVE-2013-0269 Inspect all of your heroku apps to see if they are running a vulnerable version of JSON Background A security vulnerability has been found in the Ruby JSON gem. This is the root cause for the recently-announced MySQL injection issue in Rails. A new release of the JSON gem is...
CVE-2023-20198-Scanner
Cisco IOS XE Device Scanner User Guide for CVE-2023-20198-Scanner This is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273. This Python script checks for compromised Cisco IOS XE devices by making HTTP and HTTPS...
auditd
root@kitploit: / | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Configuration Idea The idea of this auditd configuration is to provide a best-practice baseline that is designed to load out-of-the-box on major Linux distributions covers a broad set of...
bucket-stream
π¨ Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] π¨ Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...
sandsifter
s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...
cve-2026-8697
CVE-2026-8697: Login Rate Limit Bypass on TP-Link Archer C64 CVE-2026-8697 is a logic flaw in the TP-Link Archer C64's OS called TPOS in the debug message. It lets any unprivileged user connected to the router to bypass the web UI rate limit by using a residual SSH service. A simple Python script...
CVE-2024-38041
CVE-2024-38041 Kernel pointers copied to output user mode buffer with ioctl 0x22A014 in the appid.sys driver...
CVE-2026-29000
CVE-2026-29000: pac4j JWT Authentication Bypass PoC Proof of Concept for CVE-2026-29000 - A critical authentication bypass vulnerability in pac4j JWT implementation that allows attackers to forge admin tokens without a valid signature. β οΈ DISCLAIMER This tool is provided for educational and...
MOSAIC
π― MOSAIC β v1.0.0-alpha Behavioral Intelligence Across Platforms A privacy-first, multi-platform framework for behavioral and sociodynamic analysis πΊ Demo π§ What is MOSAIC? MOSAIC is not a simple OSINT aggregator. It is a behavioral analysis framework designed to help researchers, analysts, and...
recon
O.G. AUTO-RECON Features The purpose of O.G. Auto-Recon is to automate the initial information gathering phase and then enumerate based off those results as much as possible. This tool is intended for CTF's and can be fairly noisy. Not the most stealth conscious tool... Command syntax can be easi...
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...
git-secrets
=========== git-secrets Prevents you from committing passwords and other sensitive information to a git repository. .. contents:: :depth: 2 Synopsis :: root@kitploit: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force...
CVE-2024-30051
CVE-2024-30051 β Windows DWM Heap Overflow EoP Β· Master's Thesis Research -orange Heap-based Buffer Overflow in Windows Desktop Window Manager dwmcore.dll Local Privilege Escalation β Integrity Level SYSTEM via DWM process Build target: Windows 11 22H2 10.0.22621.3447 Β· Patch: KB5037771 Descripti...