BlueKeep

Bluekeep PoC Este repositorio contiene investigación sobre CVE-2019-0708. Bluekeep o CVE-2019-0708 es un exploit de RCE que afecta a las siguientes versiones de sistemas Windows: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 La vulnerabilidad ocurre...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – Post-Quantum KEM Timing Side-Channel Kyber Decapsulation Overview A vulnerable implementation of the Kyber KEM decapsulation leaks secret key bits through timing differences in the ciphertext rejection step, enabling full key recovery. Severity: Critical Private Key Compromise...

CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing

4. CVE-2026-2828 – 通过计时实现 WebGPU 跨源像素窃取 概述 恶意网站利用 WebGPU 计算着色器计时来测量跨源 iframe 的渲染时间，从而恢复敏感内容（例如银行信息）的像素值。 严重性： 高（信息泄露） 演示用 HTML/JS（单文件） root@kitploit: CVE-2026-2828 PoC WebGPU Side-Channel Leak The iframe below contains a secret code that we will leak pixel-by-pixel. // This PoC assumes a...

CVE-2026-42527

Permissive Default ObjectInputFilter — DNS Side-Channel Reproducer CVE-2026-42527 This project demonstrates CVE-2026-42527 in Apache Camel. The default ObjectInputFilter pattern that several Camel components ship for defense-in-depth deserialization filtering — java.;javax.;org.apache.camel.;! —...

Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2026-2115)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2115 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel...

Linux Distros Unpatched Vulnerability : CVE-2026-80657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling...

Important: apr-util

Issue Overview: APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or...

Amazon Linux 2 : apr-util, --advisory ALAS2-2026-3892 (ALAS-2026-3892)

The version of apr-util installed on the remote host is prior to 1.6.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3892 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or password...

Linux Distros Unpatched Vulnerability : CVE-2026-80696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ltc4282 Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading the minimum alarm voltage for the VGPIO channel. Add...

CVE-2026-80724

creationtimestamp| type| source ---|---|--- 2026-08-30 18:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100388 2026-08-31 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100388 2026-09-02 01:00:15+00:00| seen|...

CVE-2018-10933

POC of CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. Usage : root@kitploit: python3 libssh.py -s SERVERADD -u...

LdapRelayScan

LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. If you're interested in the specifics of the error-based enumeration, see below. For details regarding what can be done when you identify a lack of LDAP protections, see the...

CVE-2018-10933

CVE-2018-10933 Se encontró una vulnerabilidad en la máquina de estados del lado del servidor de libssh antes de las versiones 0.7.6 y 0.8.4. Un cliente malicioso podría crear canales sin realizar primero la autenticación, lo que resulta en acceso no autorizado. ALGUNOS DETALLES El problema provie...

CVE-2026-12513

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-09-01 20:00:04+00:00| published-proof-of-concept|...

CVE-2026-79483

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100341 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100341 2026-09-02 01:00:18+00:00| seen|...

CVE-2023-41257

creationtimestamp| type| source ---|---|--- 2026-08-30 09:00:05+00:00| seen| Telegram/UGgGAoNEue2MyCujvvwdDQWtDO2xEIWXCSv0LD0eAe5covZ4 2026-08-31 00:00:27+00:00| seen| Telegram/UGgGAoNEue2MyCujvvwdDQWtDO2xEIWXCSv0LD0eAe5covZ4...

CVE-2026-48273

creationtimestamp| type| source ---|---|--- 2026-08-29 20:00:05+00:00| seen| https://t.me/CyberDispatch/2538 2026-08-30 00:00:38+00:00| seen| https://t.me/CyberDispatch/2538...

CVE-2024-32760

creationtimestamp| type| source ---|---|--- 2026-08-29 18:00:05+00:00| seen| https://t.me/angiesoftware/51 2026-08-30 00:00:53+00:00| seen| https://t.me/angiesoftware/51...

CVE-2026-67394

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:06+00:00| seen| https://t.me/captainsmok3rofficial/502 2026-09-01 04:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mugkfxftig2y 2026-09-01 13:53:24+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-40203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail an...