CVE-2026-92615 Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed

A flaw was found in flightctl. The configureRepoHTTPSClient function in the device-render worker builds a per-repository tls.Config which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates and installs it into go-git's process-global client.Protocols m...

CVE-2026-92615

A flaw was found in flightctl. The configureRepoHTTPSClient function in the device-render worker builds a per-repository tls.Config which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates and installs it into go-git's process-global client.Protocols m...

CVE-2026-77404 RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path...

CVE-2026-77404

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path...

CVE-2026-77404 RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path...

CVE-2026-77404

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client library. Prior to 1.13.0 , the URI.String method in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into the AMQPS query string without URL-encoding them. If an application accepts a TLS asset path containing ampersan...

CVE-2023-0386

CVE-2023-0386 root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp...

CVE-2026-40856 Config disclosure in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

CVE-2026-40856

WNC T-Mobile 5G Box IDU routers are affected by an improper access control vulnerability in the wnc_maccheck.cgi endpoint, which is accessible without authentication . A remote attacker can retrieve sensitive configuration data, including the administrator web password , WiFi passphrase , and tec...

CVE-2026-40856 Config disclosure in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

cve-2025-24514

🔥 CVE-2025-24514 PoC de verificación remota de vulnerabilidad Este script es un PoC basado en Python que permite verificar de forma remota la vulnerabilidad CVE-2025-24514 manipulación de configuración de NGINX mediante inyección en auth-url de ingress-nginx y posible RCE. 🧠 Resumen de la...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Script de shell para mitigar CVE-2021-41773, una vulnerabilidad de recorrido de rutas Path Traversal y divulgación de archivos en Apache Instalación root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Uso Solución completa y forma sugeri...

EUVD-2026-80591

On affected platforms running Arista EOS with Simple Network Management Protocol SNMP configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to thi...

ingressNightmare-CVE-2025-1974-exps

Pesadilla de Ingress CVE-2025-1907 Descripción Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de kubernetes/ingress-nginx. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe en el manejo de solicitudes...

CVE-2013-3900-Remediation-Script

root@kitploit: Script de Corrección de CVE-2013-3900 Definir rutas de registro para configuraciones de 32 bits y 64 bits $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Función para agregar o actualizar la...

AZL-101150 CVE-2026-89792 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

UBUNTU-CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-89792 ksmbd: prevent out-of-bounds reads in share config responses

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...