CVE-2026-96745

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...

DEBIAN-CVE-2026-96745

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...

CVE-2026-93543

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

EUVD-2026-86121

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93543

An out-of-bounds read exists in the XI2 class parser of libXi prior to version 1.8.4 . This vulnerability could be exploited by a malicious X server to cause a crash in an attached X client. No specific exploits or in-the-wild exploitation details are provided in the documents.

CVE-2026-93543 Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93543 Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

Zabbix-CVE-2024-42327-SQL-Injection-RCE

PoC de RCE para Zabbix-CVE-2024-42327 root@kitploit: / / | / / / | \ / \ / // / / // /| | / / / / / | | / / // // / / // / // // // // / / / / / / / / | |/ / /// // // / / // / // / / / / / |// //// // // //// // NSFOCUS CERT detectó que Zabbix publicó un aviso de seguridad y corrigió la...

CVE-2026-47858

CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...

CVE-2026-16723

🚨 CVE-2026-16723 — RCE por cadena de sondeo de recursos @JSONType en fastjson 1.2.83 Proyecto de reproducción de carga remota de clases / ejecución de comandos en fastjson 1.2.66 1.2.83 mediante la anotación@JSONType + nombre de clase ilegal + protocolo jar:. ⚠️ Descargo de responsabilidad Este...

CVE-2026-93542

An out-of-bounds read exists in libXi before version 1.8.4 during the parsing of the XI2 class . The vulnerability is triggered via the size_classes() and copy_classes() functions. This flaw could be exploited by malicious servers to cause a crash of the X client. No specific exploit links or rem...

CVE-2026-93542 Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()

An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

EUVD-2026-86210

An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

CVE-2026-21020-Protobuf-Message-Parsing-Polymorphic-Deserialization-Vulnerability

CVE-2026-21020 – Vulnerabilidad de deserialización polimórfica en el análisis de mensajes Protobuf Código del programa Python con protobuf root@kitploit: protovuln.py - Insecure handling of Any type import addressbookpb2 Example protobuf Simulated deserialization that trusts an injected typeurl...

CVE-2018-15982

CVE-2018-15982 Fuentes de Flash para CVE-2018-15982 utilizadas por NK esto es un volcado de un objeto ActiveX completamente armado utilizado por NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Los payloads están en las Clases 6 y 7...

nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Algunas notas de depuración y exploit no ciego Exploit Usa burpsuite, modifica ls / -al en la petición; ten en cuenta que las comillas dobles se reemplazarán por comillas simples root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintos...

CVE-2018-1000861

CVE-2018-1000861 Script simple para explotar CVE-2018-1000861, escrito en Python 3 Uso: root@kitploit: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help show this help message and exit -u URL, --url URL Target Jenkins server -c CMD, --cmd CMD Command to execute -r,...

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

CVE-2022-22965 — Análisis de Operaciones de Seguridad de Spring4Shell Una simulación práctica de un Centro de Operaciones de Seguridad SOC donde desempeñé el rol de Analista de Seguridad de la Información respondiendo a un intento activo de explotación de Spring4Shell. Este repositorio documenta ...

CVE-2026-93542

An out-of-bounds read in libXis XI2 class parsing via sizeclasses...

Linux Distros Unpatched Vulnerability : CVE-2026-93543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. CVE-2026-93543 Note...