CVE-2026-97524

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky error conditions, and then try to hold the data lock again. Break the...

UBUNTU-CVE-2026-97939

In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...

UBUNTU-CVE-2026-97986

In the Linux kernel, the following vulnerability has been resolved: virtioinput: stop callbacks before unregistering input device virtinputremove unregisters the input device before resetting the virtio device. virtinputrecvevents drops vi-lock around inputevent, so clearing vi-ready does not sto...

UBUNTU-CVE-2026-97574

In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...

UBUNTU-CVE-2026-97621

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: fix unchecked bound endpoint name length rockchipdpdrmencoderenable uses sprintf to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficientl...

UBUNTU-CVE-2026-98072

In the Linux kernel, the following vulnerability has been resolved: net/rds: use wqhassleeper in releaseinxmit releaseinxmit clears RDSINXMIT with clearbitunlock and then checks waitqueueactive to decide whether anyone needs waking. clearbitunlock is only a release operation: it orders the critic...

UBUNTU-CVE-2026-97566

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADDADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale ADDADDR announcement entry alive when removing the id 0 endpoint. This happens because the id 0 removal path does not te...

CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

CVE-2026-97600

In the Linux kernel, the following vulnerability has been resolved: ieee802154: cc2520: fix FIFOP work use-after-free The FIFOP interrupt handler queues cc2520fifopirqwork. On removal, cc2520remove only flushes the work. The devm-managed FIFOP IRQ remains active until after -remove returns and ca...

kubeeye

English | 中文 KubeEye 是为 Kubernetes 设计的云原生集群巡检工具，用于根据自定义规则发现 Kubernetes 集群中存在的问题及风险。 快速开始 安装 可从 Releases 中下载安装包（其中包含helm chart，demo rules 以及 供离线环境部署的镜像） root@kitploit: VERSION=v1.0.3 wget https://github.com/kubesphere/kubeeye/releases/download/$VERSION/kubeeye-offline-$VERSION.tar.gz tar -zxvf...

CVE-2025-32429

CVE-2025-32429 PoC de Inyección SQL en XWiki Autor: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑32429 Vulnerabilidad: Inyección SQL Ciega en la API REST de XWiki LiveData Archivo Afectado: getdeleteddocuments.vm parámetro sort Descripción : Existe una vulnerabilidad de Inyección SQL Ciega en...

CVE-2025-6082

CVE-2025-6082 PoC de Divulgación de Ruta Completa Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilidad : Divulgación de Ruta Completa CWE-200 Descripción Este PoC explota un fallo de Divulgación de Ruta Completa en el plugin de WordPress Birth Chart Compatibility version...

CVE-2025-7840

Exploit XSS para CVE-2025-7840 Autor : Byte Reaper @ByteReaper0 Descripción Exploit de prueba de concepto para CVE-2025-7840 , dirigido a un endpoint de aplicación web vulnerable que no sanitiza la entrada del usuario en el parámetro Firstname de un formulario de reserva. Al construir una solicit...

CVE-2025-7795

CVE-2025-7795 – Exploit de Desbordamiento de Búfer en Router Tenda Autor : Byte Reaper Telegram : @ByteReaper0 CVE-ID : CVE-2025-7795 Tipo de vulnerabilidad : Desbordamiento de búfer Objetivo : Routers Tenda Exploit : Remoto, sin autenticación 📝 Descripción Existe una vulnerabilidad de...

CVE-2025-7769

CVE-2025-7769 – Inyección Remota de Comandos en mobileapi Descripción : Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE‑2025‑7769 , una vulnerabilidad crítica de Inyección de Comandos remota encontrada en dispositivos Tigo Energy CCA que exponen el endpoint...

polymorph

Polymorph Polymorph 是一个工具，它允许在实时拦截的网络数据包上执行 Python 代码，从而动态修改网络流量。 该框架可用于实时修改实现任何公开指定网络协议的网络数据包。此外，通过创建自定义抽象和字段，它还可用于修改私有网络协议。 安装 Polymorph 专为在 Linux 操作系统上安装和运行而设计。安装该框架前，必须先安装以下依赖项： root@kitploit: sudo apt install build-essential python3-dev libnetfilter-queue-dev tshark tcpdump python3-pip...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

CVE-2025-41373

CVE-2025-41373 – Inyección SQL en Gandia Integra Total Autor: Byte Reaper CVE: CVE-2025-41373 Vulnerabilidad: Inyección SQL Autenticada Ruta Afectada: /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= Descripción: Este endpoint concatena el parámetro idestudio directamen...

CVE-2025-36041

CVE-2025-36041 IBM MQ SSL Bypass Exploit Resumen Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2025-36041 , una vulnerabilidad en IBM MQ Message Queue que permite eludir la validación de certificados SSL. Al inyectar un certificado SSL falso y usar parámetros MQCONNX...

React2P4IM0Nshell

React2P4IM0Nshell 💥Extension Tool para Auditoría y Explotación avanzada RCE/Source Leak/Dos CVE-2025-55182/83/84 para entornos Next.js y React Server Components RSC directamente desde tu navegador, con terminal linux incorporada en la propia extension para resibir cualquier reverse shell ❌ ⚡...