linux-4.1.15_CVE-2023-26607

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

Gitmails

Desarrollo - IMPORTANTE Esta versión de Gitmails ya no recibe mantenimiento. Echa un vistazo a la versión de Gitmails Shell si deseas usar una versión que recibe mantenimiento y, con suerte, se desarrolla. Si no deseas usar la versión de shell y prefieres la versión en Python, siéntete libre de...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Invoke-ATTACKAPI

Invoke-ATTACKAPI DEPRECATED WE RECOMMEND TO USE: https://github.com/Cyb3rWard0g/ATTACK-Python-Client A PowerShell script to interact with the MITRE ATT&CK Framework via its own API in order to gather information about techniques, tactics, groups, software and references provided by the MITRE ATT&...

security-onion

Security Onion Security Onion 16.04 has reached End Of Life: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html You can find the new Security Onion 2 repo at: https://github.com/Security-Onion-Solutions/securityonion/...

regreSSHion-CVE-2024-6387-

CVE-2024-6387 Checker This README provides instructions for using the script to check if your OpenSSH installation is vulnerable to CVE-2024-6387. The script inspects the installed sshd binaries on your system, determines their versions, and checks for vulnerability status based on the detected...

reternal-quickstart

RE:TERNAL Nota: Todavía en desarrollo, solo usar para pruebas y ¡no exponer interfaces! El compose actual aún no funciona, solo intente si sabe lo que está haciendo RE:TERNAL es un servicio centralizado de orquestación de purple team para gestionar frameworks C2 de terceros. Los agentes se instal...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

osinteye

This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: $ git clone https://github.com/rly0nheart/osinteye.git $ cd...

CVE-2023-1454-EXP

JeecgBoot SQL CVE-2023-1454 Exploit 1. Vulnerability Details jeecg-boot version 3.5.0 has an SQL injection vulnerability, which stems from a security issue in the file jmreport/qurestSql, leading to SQL injection via the parameter apiSelectId. 2. Usage python3 CVE-2023-1454.py optional arguments:...

CVE-2017-7529-

CVE-2017-7529-Nginx Range Header Integer Overflow Nginx is an open-source web server widely used as a high-performance web server, reverse proxy, cache server, and more. In Nginx versions up to 1.13.2, an integer overflow vulnerability exists that allows an attacker to manipulate the Range header...

external_expat_AOSP10_r33_CVE-2022-25235

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

Fortinet FortiClientEMS 7.4.4 - SQL Injection

Fortinet FortiClientEMS version 7.4.4 and earlier contains an unauthenticated SQL injection vulnerability in the /api/v1/initconsts endpoint. The 'Site' HTTP header value is passed directly into the PostgreSQL searchpath without sanitization, allowing remote unauthenticated attackers to inject...

IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection

IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. id: CVE-2019-4716 info: name: IBM Planning Analytics - Authentication Bypass & Remote...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

mongo-express Remote Code Execution

mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...

Hikvision IP ping.php - Command Execution

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127

watchTowr-vs-f5-bigip-PreAuth-RCE Detection Artifact Generator for F5 BIG-IP See our blog post for technical details. Detection in Action ./watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127.py --host 192.168.5.36 --port 80 --command 'touch /tmp/hello' all the offsets/addresses are hardcoded for...

kit

kit Tool registry manager -- manages developer toolchains from git-based registries, layered on top of mise. What it is kit resolves tool versions across multiple registries, generates mise configuration, verifies SHA-256 checksums against publisher release artifacts, verifies cosign signatures...