CVE-2026-15409

cve-id ⚡ 简单用法 请仅在安全且授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 授权的渗透测试环境 示例设置： root@kitploit: git clone cd 项目使用 Python，请按以下步骤操作 创建虚拟环境 python -m venv venv 激活虚拟环境 macOS / Linux source venv/bin/activate Windows（Git Bash / WSL） source venv/Scripts/activate 安装依赖 pip install -r requirements.txt 示例用法：...

CVE-2026-58231

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2026-53365

CVE-2026-53365 Dona Supporta la manutenzione di questo progetto con PayPal o scansionando il codice QR qui sotto. ⚡ Uso Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di test d...

CVE-2025-67038

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Ambienti di laboratorio isolati Ambienti di test di penetrazione autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python follo...

CVE-2026-39808

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di penetration testing autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python...

CVE-2026-20262

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Setup di laboratorio isolati Ambienti di test di penetrazione autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python follow bel...

CVE-2026-0542

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di penetration testing autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python...

EUVD-2026-42400

asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading and weakly via $ENV username substitution...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB’s UnRAR version prior to 6.12 on Linux and UNIX allowed directory traversal, enabling writing to files during an extraction operation also known as unpacking. This was demonstrated by creating a file named /.ssh/authorizedkeys. NOTE: WinRAR and Android RAR are not affected by this issue...

EUVD-2026-63625

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

CVE-2026-68782

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

CVE-2026-69419

An integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code remotely. Microsoft's update guide is the reference; no specific affected version, patch, or exploit details are provided in the documents.

CVE-2026-68782

An SQL injection flaw in Azure SQL Database allows an authenticated, low-privilege network attacker to elevate privileges, with CVSS 9.9 (Critical) reflecting full confidentiality, integrity, and availability impact. Microsoft's update guide is the primary remediation reference; no patch version ...

CVE-2026-68789

CVE-2026-68789 is a SQL injection vulnerability in Azure SQL Database that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 9.9 (CRITICAL) with a scope change, indicating high impact on confidentiality, integrity, and availability. CISA's SSVC as...

Azure Data Manager for Energy Remote Code Execution Vulnerability

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

Windows Remote Help Defense Spoofing Vulnerability

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

Microsoft Remote Help Denial of Service Vulnerability

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

PT-2026-79207

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. Recommendations At t...