Oracle Linux 8 : ELSA-2026-67315-0: / nginx:1.24 (ELSA-2026-673150)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-673150 advisory. - Resolves: RHEL-212457 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 - Resolves: RHEL-217957 - nginx:1.24/ngin...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Snapcast vulnerability (USN-8767-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8767-1 advisory. It was discovered that Snapcast incorrectly handled crafted JSON-RPC requests. A remote attacker could possibly use this issue to execute...

Debian dsa-6502 : mkvtoolnix - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6502 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6502-1 [email protected] https://www.debian.org/security/ Moritz...

Ubuntu 24.04 LTS / 26.04 LTS : kitty vulnerabilities (USN-8763-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8763-1 advisory. It was discovered that kitty incorrectly escaped error messages when handling specially crafted terminal escape sequences. A remote attacker...

Google Chrome Authorization Vulnerability (CNVD-2026-37841)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing vulnerability, which stems from the lack of authorization verification in the Extensions component. Attackers can exploit this vulnerability to execute arbitrary code outside the sandbox through specially...

MiracleLinux 8 : nginx:1.24 nginx-1.24.0-3.module+el8+2045+adfc96b2.5.ML.1 (AXSA:2026-1852:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1852:01 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the...

Debian dsa-6503 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6503 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6503-1 [email protected] https://www.debian.org/securit...

Security Updates for Microsoft Office Products (September 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the september-16-2026 advisory. - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678,...

SUSE SLED15 / SLES15 Security Update : python-GitPython (SUSE-SU-2026:4191-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4191-1 advisory. - CVE-2026-87817: failure to properly validade the git directory location allows attackers to impersonate the...

The vulnerability of the hedwigcgi_main() function in D-Link DIR-645 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the hedwigcgimain function in D-Link DIR-645 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

cve-2023-30212

cve-2023-30212 PoC para CVE-2023-30212 usando Docker Configuración del entorno CVE-2023-30212 e informe PoC 📌 Resumen Este informe contiene la configuración directa de un entorno web vulnerable basado en Docker para la vulnerabilidad CVE-2023-30212 no disponible en Vulhub, y la demostración de...

CVE-2022-20607

CVE-2022-20607 En el firmware celular Pixel, existe una posible escritura fuera de los límites debido a la falta de una verificación de límites. Esto podría conducir a la ejecución remota de código con autenticación LTE necesaria. No se necesita interacción del usuario para la explotación...

CVE-2023-47268

PrusaSlicer Arbitrary Code Execution Priv Esc using a .3mf file with vulnerable prusaslicer version. Make sure you can run prusaslicer using sudo. Linux 1.Download the files 2.Change IP and PORT in exploit.sh 3.Make sure to have exploit.sh on /tmp directory 4.Execute the following command sudo...

CVE-2013-1081

This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

CVE-2021-44228

CVE-2021-44228 Example Example vulnerability container build for CVE-2021-44228. DO NOT USE FOR ANYTHING OTHER THAN HIGHLY CONTROLLED SECURITY TESTING. This repository contains a sample application that deliberately uses a dependency with a dangerous remote-code execution vulnerability. Even in a...

CVE-2022-30292

CVE-2022-30292 Description This vulnerability is the heap-based buffer overflow in the function threadcall in Squirrel 3.2 and below. It caused by the lack of the call of sqreservestack function. This vulnerability leads to DoS of the client and could possibly lead to sandbox escape and arbitrary...

CVE-2022-26810

CVE-2022-26809 RCE Exploit CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the...

CVE-2025-49844-RediShell-AI-made-Revshell

CVE-2025-49844 RediShell PoC de Revshell hecho por IA Completación no probada del PoC de Redishell hecho por IA. PoC original: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Pieza coreana: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua ¿Progreso? Lue...