CVE-2026-84380 vulnerabilities

Vulnerabilities for packages: py3-httpx2...

CVE-2026-84364 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84363 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84365 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84379 vulnerabilities

Vulnerabilities for packages: py3-httpx2...

CVE-2026-84380 vulnerabilities

Vulnerabilities for packages: py3-httpx2...

CVE-2026-84382 vulnerabilities

Vulnerabilities for packages: py3-httpx2...

Vulnerability handling is handled differently in GitLab Community and Enterprise editions.

GitLab has identified a vulnerability in both the Community and Enterprise editions of the platform. The vulnerability resides in the repository commit API, where path traversal is possible. As a result, unauthenticated users can read arbitrary files on the system. The root cause of the...

CVE-2026-78159

creationtimestamp| type| source ---|---|--- 2026-09-12 08:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvcmxdfmwh2p 2026-09-12 09:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117257248707504649 2026-09-12 09:00:26+00:00| seen|...

CVE-2026-78006

creationtimestamp| type| source ---|---|--- 2026-09-12 08:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvcmxayqve25 2026-09-12 09:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvcpr2g3nq23 2026-09-12 09:06:14+00:00| seen|...

wp2shell-Hestia-Scanner

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά HestiaCP 서버용 읽기 전용 WordPress 보안 스캐너. 호스팅된 모든 사이트에서 wp2shell 침해 지표를 탐지합니다 — 클라이언트별 이메일 보고서, 코어 파일 diff, SHA256 웹셸 탐지, 위험 점수, 선택적 AI 평가 포함. ⚠️ 안전한 버전: WordPress 6.8.6 / 6.9.5 / 7.0.2 이상. 이 스크립트는 아무것도 수정하지 않습니다 — 전체 과정이 읽기 전용입니다. 🇬🇧 English...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — 교차 포트 가로채기를 통한 동일 출처 정책 우회 CVE-2026-20643...

CVE-2026-87759

creationtimestamp| type| source ---|---|--- 2026-09-12 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117256894812339509 2026-09-12 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvckqembwm24 2026-09-12 18:00:26+00:00| seen|...

CVE-2026-55040

CVE-2026-55040 Exploit code for CVE-2026-55040, it can create auth header for any validate account. Details at: https://blog.viettelcybersecurity.com/sharepoint-cve-2026-55040/...

CVE-2026-57155

https://github.com/opnsense/core/security/advisories/GHSA-wjqq-rfmm-v5h3...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux 커널 권한 상승 연구 프로젝트 개요 GhostLock CVE-2026-43499은 Linux 2.6.39부터 7.1-rc1까지 영향을 주는 커널 스택 UAF 취약점으로, FUTEXCMPREQUEUEPI 경쟁 조건을 통해 트리거됩니다. 이 프로젝트는 NebuSec/CyberMeowfia의 x8664 익스플로잇을 OPPO Find N2 ARM64, kernel 5.10.236에 포팅합니다. 프로젝트 상태 개발 진행 중 — ...

POC-CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...

mcpExec

mcpExec는 CVE-2026-23744를 이용하여 취약한 MCPJam Inspector 설치의 URL을 통해 리버스 셸을 획득하는 도구입니다. 설치 root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip install argparse pip install requests chmod +x mcpExec.py venv 종료...

CVE-2026-42055

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

wp2shell-poc-fulljs

WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...