usbkill

« usbkill » è un kill-switch anti-forense che attende un cambiamento sulle porte USB e poi spegne immediatamente il computer. Per eseguirlo: root@kitploit: sudo python usbkill.py oppure root@kitploit: sudo python3 usbkill.py Progetto correlato; stessa idea, ma implementata come driver Linux:...

POC_CVE-2026-45185

Laboratorio di validazione del template Nuclei per CVE-2026-45185 Questo repository non è un repository PoC proof-of-concept di exploit generici. È un laboratorio di validazione locale per riprodurre e verificare il comportamento di un template CVE-2026-45185 pensato per essere contribuito a...

CVE-2024-3094

CVE-2024-3094 Einfacher POC zum Testen der CVE-2024-3094-Sicherheitslücke in einem K8s-Cluster ❗ HAFTUNGSAUSSCHLUSS ❗ NUR ZU BILDUNGSZWECKEN – DER AUTOR ÜBERNIMMT KEINE HAFTUNG FÜR SCHÄDEN, DIE DURCH DIE NUTZUNG DIESER SOFTWARE ENTSTEHEN Beschreibung Wir werden einen verwundbaren Pod bereitstelle...

CVE-2024-10511

CVE-2024-10511 CWE-287: Autenticazione impropria Sommario Il prodotto Schneider Electric PowerChute Serial Shutdown è un software di gestione UPS che consente lo spegnimento ordinato del sistema e funzionalità di gestione dell'energia per desktop, server e workstation. PowerChute Serial Shutdown...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Autor Mohammed Idrees Banyamer 📍 Land: Jordanien 📸 Instagram: @banyamersecurity Proof-of-Concept-Exploit für CVE-2026-26235 – Nicht authentifizierter Denial of Service durch fehlende Authentifizierung im JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Beschreibung der Schwachstelle CVE-2026-26235 ist eine...

CVE-2021-43471

CVE-2021-43471 Уязвимость отказа в обслуживании, вызванная несанкционированным доступом к принтерам Canon Затронутый продукт: LBP223 Время: 2021.11.3 Вход в режим системного администратора не требует пароля учетной записи или PIN-кода. Злоумышленник может удаленно выключить устройство после входа...

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — Scanner di vulnerabilità Exim "Dead.Letter" Uno script shell per rilevare se un sistema Linux è vulnerabile a CVE-2026-45185, un use-after-free nell'Exim mail transfer agent che può portare all'esecuzione di codice remota. Progettato per l'uso in pipeline CI/CD, strumenti di...

CVE-2021-3166

È stata scoperta una vulnerabilità su Asus DSL-N14UB1 v.1.1.2.3805. Un attaccante può caricare qualsiasi file nella casella del firmware purché venga rinominato come SettingsProductName.trx ad es. SettingsDSL-N14U-B1.trx. Una volta caricato il file, vengono attivate misure di spegnimento su...

CVE-2026-80572 Input: byd - synchronize timer deletion before freeing private data

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight, passaggio di consegne per il revival offline Questo pacchetto contiene un boot offline funzionante di Transformers: Forged to Fight, insieme a tutti gli strumenti, le patch e le note di reverse engineering utilizzati per arrivarci. È pensato per essere raccolto da...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdm (UTSA-2026-093042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093042 advisory. A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098690 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, bu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098675 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM...

fire-hd-ownership

fire-hd-ownership Possedere il tablet che avevo già comprato. Nel novembre 2022 ho comprato un Fire HD 10 11ª generazione, modello 2021 su eBay per 114,26 $ per usarlo come chiosco per Home Assistant. Ha funzionato bene per anni, poi ha iniziato a spegnersi da solo. I log dicevano il perché: era ...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Prevent the release of journal inode after journal shutdown. Before calling ocfs2deleteosb, the function ocfs2journalshutdown has already been executed in ocfs2dismountvolume. Therefore, osb-journal must be NULL. As a...

Astra Linux – Vulnerability in Thunderbird

When a worker is shut down, it was possible for the script to run late in the lifecycle, at a time when it should not be possible. This vulnerability affects Firefox 96, Thunderbird 91.6, and Firefox ESR 91.6...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: The iio object was freed before atomindexiio was called by atomparse, and it wasn’t released when the driver was shut down. This issue was fixed by releasing the iio object in radeonatombiosfini. Unreferenced object:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ftrace: Fixed a use-after-free issue related to dynamic ftraceops. KASAN reported a use-after-free involving ftrace ops 1. It was discovered that perf had registered two ops with the same content, both being dynamic. After the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clearing tablesz when rprocshutdown is called. There is a scenario where a kernel dump may occur: Use U-Boot to start a remote processor rproc with a resource table published to a fixed address by rproc. After t...