168387 matches found
CVE-2025-61456
🛡️ CVE Disclosure: CVE-2025-61456 — Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61456 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the index.php endpoint...
ShieldCrash
ShieldCrash Windows Defender 0day Vulnerability Microsoft has failed to properly patch ShieldBreak CVE-2026-69414, under specific conditions it is still possible to trigger the exact same problem that was caused by ShieldBreak. While Microsoft fixed several things to prevent re-exploiting the...
specterops-k8s-red-teamers-libvirt-patch
SpecterOps Kubernetes for Red Teamers Libvirt Patch An unofficial libvirt and QEMU/KVM patch for the free SpecterOps Kubernetes for Red Teamers course. The original network addresses, Kubernetes topology, Mythic callbacks and lab behaviour remain unchanged. Why? Because running VirtualBox on Linu...
ROOT-APP-NPM-CVE-2024-55565 CVE-2024-55565 in nanoid - Patched by Root
Root has patched CVE-2024-55565 in the nanoid package for Root:npm. Multiple fixed versions available...
CVE-2026-16723
CVE-2026-16723 Este es un parche N-day que publicamos probando las capacidades de nuestro modelo...
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligne...
CVE-2026-38360
CVE-2026-38360: Path Traversal en dash-uploader...
CVE-2026-80917
In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...
Expression-Sandbox-Escape-Simulation-Lab
🧪 Expression Sandbox Escape – Simulation Lab A minimal experimental environment for demonstrating JavaScript expression sandbox escape and patch evolution. Through multiple versions of the sandbox, it implements the progression from: Fully escapable → patching this → then patching destructuring...
How-to-Patch-CVE-2025-32709
Cómo Parchear la Vulnerabilidad CVE-2025-32709 Flujo de trabajo real de parcheo para CVE-2025-32709. Desde la instalación del hotfix hasta la validación de alertas SIEM: este repositorio documenta cada paso con capturas de pantalla, comandos y lógica de detección. Captura de pantalla del panel de...
CVE-2026-2005
Upstream patch for CVE-2026-2005 pgcrypto, PostgreSQL 17.7 → 17.8...
UBUNTU-CVE-2026-61915
VPATCH BYPARAM double-free: An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the...
CVE-2026-86765 Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint
Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint. Authenticated users with edit permission but explicitly denied checkout permission can reassign assets, bypass check-in procedures, and alter custody records by...
CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch
CVE-2026-3030 – Prototype Pollution in JSON Merge Patch Program Code Node.js root@kitploit: // server.js - Vulnerable REST API with deep merge const express = require'express'; const app = express; app.useexpress.json; let config = role: 'user', settings: ; // Insecure deep merge function...
CVE-2023-29324_Patch_Deploy
This repository does not have a README...
ROOT-APP-NPM-CVE-2026-0775 CVE-2026-0775 in npm - Patched by Root
Root has patched CVE-2026-0775 in the npm package for Root:npm. Multiple fixed versions available...
chef_tissues
Tissues Instala el parche para CVE-2017-0145, también conocido como WannaCry. Más información: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt Uso: root@kitploit: "name":"mynode", "runlist": "recipetissues"...
CVE-2025-32433
CVE-2025-32433 Una vulnerabilidad crítica en el servidor SSH de Erlang/OTP permite la ejecución remota de código RCE sin autenticación. La falla existe en el mecanismo de manejo de mensajes del protocolo SSH, permitiendo a los atacantes ejecutar comandos arbitrarios sin requerir credenciales de...