USN-8661-5: Linux kernel (Raspberry Pi) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Ejecución Remota de Código Zero-Click en el Sistema Android 🚨 "Un solo paquete malicioso puede tomar control de tu dispositivo." — Equipo de Seguridad de Android, Noviembre de 2025 🎯 Resumen de la Vulnerabilidad Atributo| Detalles ---|--- CVE ID| CVE-2025-48593 Gravedad| 🔴 Crític...

CVE-2025-54914-PoC

CVE-2025-54914 Azure Route Exploit Resumen Esta es una implementación mejorada de la vulnerabilidad CVE-2025-54914 de enrutamiento de Azure Networking. Esta versión mantiene la funcionalidad principal de la CVE mientras añade más características como persistencia, evasión, escaneo multiobjetivo y...

BitLeak

BitLeak BitLeak es una herramienta en Python que verifica y muestra descargas de torrents vinculadas a una dirección IP determinada. root@kitploit: git clone https://github.com/AnkhCorp/BitLeak.git root@kitploit: pip3 install -r requirements.txt root@kitploit: python bitleak.py...

CVE-2026-95503

A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without SPNEGO, the system fails to verify the identity of the Key Distribution Center KDC by requesting a server ticket. This...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 Vulnerability Details CVEID:CVE-2026-45205 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a...

CVE-2023-25203

CVE-2023-25203: Application vulnerable to SSRF Server Side Request Forgery attacks Description CVE-2023-25203 identifies a vulnerability within the Therefore solution, which is susceptible to Server-Side Request Forgery SSRF attacks due to its use of Aspose software for converting uploaded files...

CVE-2026-23744

CVE-2026-23744 CVE-2026-23744 RCE While analyzing this vulnerability, I discovered that MCPJam Inspector exposed the /api/mcp/connect endpoint to the network by binding to 0.0.0.0. This endpoint accepts a JSON object containing serverConfig, including the fields command and args. The application...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...

emby_ssrf

msfemby This tool will check a remote EMBY server to attempt to use an SSRF vulnerability to perform an http scan of the network internal to the EMBY server. This is based on the vulnerability CVE-2020-26948. Installation Clone the repo and put the rb files into the...

bluekeepscan

BlueKeepScan Simple envoltorio sobre PoC de @zerosum0x0 para verificar CVE-2019-0708 en redes grandes con subprocesos múltiples. Preparación En primer lugar, debes descargar e instalar el original: root@kitploit: git clone https://github.com/zerosum0x0/CVE-2019-0708.git cd...

CVE-2022-34961

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Vulnerability Explanation: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Users Timeline module. Attack Vectors: The attacker must post something on t...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

Cyber-Defenders-lab-

CyberDefenders Blue Team Labs My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Each lab is a real network forensics investigation — starting from a PCAP file and ending with a full reconstruction of the attack. 📄 Full combined PDF report — includes every lab write-up,...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 System Vulnerability Checklist A security assessment and network hardening exercise conducted against a vulnerable Linux target machine. The project focuses on identifying critical vulnerabilities, assessing their impact, and implementing firewall-based mitigation using IPTables. 📌 Project...

CVE-2025-24071

CVE-2025-24071 CNA: Microsoft Corporation Published: 2025-03-11 Updated: 2025-03-13 Title: Microsoft Windows File Explorer Spoofing Vulnerability Description Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing ove...

CVE-2024-24919

CVE-2024-24919 Checker A simple bash script to check for the vulnerability CVE-2024-24919. Installation Clone the repository: root@kitploit: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh Usage ./CVE-2024-24919-scan.sh -l ips.txt HUNT...

etherleak-checker

Etherleak Vulnerability Checker This Python script helps to detect the Etherleak CVE-2003-0001 vulnerability on a target host by analyzing the padding data in network packets. The script uses Scapy to send various types of requests ICMP, ARP, or TCP and checks if the responses contain any padding...

trippy

Trippy combines the functionality of traceroute and ping and is designed to assist with the analysis of networking issues. Quick Start See the guide...

chanleakcheck

chanleakcheck This a tool to check if your lnd node was targeted by CVE-2019-12999, which was recently fully disclosed on. The tool will check if your node accepted an invalid channel, as well as attempt to quantify the total amount of lost coins, if any. Note that this tool is only for lnd,...