May 2026 Security Advisory Ivanti Virtual Traffic Manager (vTM) (CVE-2026-8051)

Summary Ivanti has released updates for Ivanti Virtual Traffic Manager which addresses one High severity vulnerability. Successful exploitation could lead to admin authenticated remote code execution. We are not aware of any customers being exploited by this vulnerability at the time of disclosur...

May 2026 Security Advisory Ivanti Secure Access Client (CVE-2026-7431, CVE-2026-7432)

Update 22 May: CVE-2026-8992 has been added to Vulnerability Details Summary Ivanti has released updates for the Ivanti Secure Access Client which addresses one medium severity vulnerability and two High severity vulnerabilities. We are not aware of any customers being exploited by these...

Security Advisory - Ivanti Xtraction (CVE-2026-8043)

Summary Ivanti has released an update for Ivanti Xtraction which addresses one Critical severity vulnerability. Successful exploitation could lead to sensitive information disclosure and client-side attacks. We are not aware of any customers being exploited by this vulnerability at the time of...

Security Advisory Ivanti Endpoint Manager (EPM) May 2026

Security Advisory Ivanti Endpoint Manager EPM CVE-2026-8109, CVE-2026-8110, CVE-2026-811 Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses one Medium severity and two High severity vulnerabilities. Successful exploitation could lead to information disclosure, privile...

Security Advisory Ivanti Endpoint Manager (EPM) August 2026

Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...

Security Advisory Ivanti DSM (CVE-2026-3483)

Security Advisory Ivanti DSM CVE-2026-3483 Summary Ivanti has released an update for Ivanti Desktop and Server Management DSM which addresses one high severity vulnerability. Successful exploitation could allow an attacker to elevate their local privileges. We are not aware of any customers being...

CVE‑2026‑49975 – HTTP/2 Denial of Service Vulnerability

Status: EPMM unaffected Summary: CVE‑2026‑49975 is a denial‑of‑service DoS vulnerability affecting HTTP/2 implementations in several web servers. The issue allows an unauthenticated attacker to exhaust server memory using specially crafted HTTP/2 requests. EPMM / Sentry rely on Apache Tomcat for...

Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)

Created Date 09.06.2026 14:00:52...

Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-10727)

Update 11 June: FAQ Updated Summary Ivanti has released updates for Ivanti Endpoint Manager Mobile EPMM which addresses one high severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details CVE Number | Descriptio...

Security Advisory EPM February 2026 for EPM 2024

Update 18 Feb: Added FAQ on patching Agents. Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses one high severity vulnerability and one medium severity vulnerability. Successful exploitation could allow a remote authenticated attacker to leak arbitrary data or...

CVE-2020-1938-Tomact-file_include-file_read

CVE-2020-1938Tomcat-fileinclude and filered POC per lo sfruttamento delle vulnerabilità di inclusione file e lettura file di Tomcat Lettura file Usage :python2 "Tomcat-ROOT路径下文件读取CVE-2020-1938.py" -p 8009 -f /test.txt 127.0.0.1 Inclusione file Usage :python2 "Tomcat-ROOT路径下文件包含CVE-2020-1938.py" -...

CVE-2020-29669

Macally WIFISD2-2A82 Writeup per CVE-2020-29669 di Maximilian Barz Silky e Daniel Schwendner code-byter ========================== Questo è un writeup sullo sfruttamento del Macally WIFISD2-2A82 Travel Router versione firmware: 2.000.010. L'utente Guest è in grado di reimpostare la propria...

CVE-2025-32463

Vulnerabile: sudo 1.9.14 - 1.9.17 Corretto: sudo 1.9.17p1 e versioni successive Exploit root@kitploit: git clone https://github.com/kh4sh3i/CVE-2025-32463.git cd CVE-2025-32463 chmod +x exploit.sh id ./exploit.sh id...

CVE-2025-24813

Questo repository non contiene un README...

cve-2022-39197

cve-2022-39197 Atualmente, apenas imagens remotas podem ser carregadas...

CVE-2025-69604

CVE-2025-69604 Descrição Esta vulnerabilidade é semelhante à descrita em CVE-2025-61229 – um atacante pode editar o modelo de tarefa para fazer com que as tarefas de backup do SuperDuper instalem um pacote arbitrário. O pacote pode então executar scripts de shell como usuário root e com o mais al...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: Iniezione di Comandi OS nei Router TP-Link Per maggiori informazioni, vedere https://vulners.com/cve/CVE-2026-3227 Una vulnerabilità persistente e autenticata di iniezione di comandi OS nel firmware dei router TP-Link che può causare il bricking del dispositivo o una potenziale...

WSO2-2021-1258

WSO2-2021-1258: Vulnerabilità Zip Slip in WSO2 ESB È stata identificata una vulnerabilità di directory traversal basata su file ZIP Zip Slip nella WSO2 Management Console. L'esecuzione remota di codice può essere ottenuta scrivendo/sovrascrivendo file specifici. Divulgazione del fornitore: La...

samsung-android-lpe

Parte 1: Esecuzione arbitraria di comandi AT CVE-2026-20980 I comandi dell'Application Processor AP sono gestiti da atdistributor dopo aver commutato la modalità di connessione su un dispositivo sbloccato utilizzando. root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor verifica i...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Guida all'Escalation dei Privilegi 📋 Passaggi Rapidi per lo Sfruttamento Passo 1: Preparare l'immagine XFS Macchina locale root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt...