CVE-2023-25355-25356

エクスプロイトとクレジット このエクスプロイトは [email protected] によって発見され、以下の2つの素晴らしい資料で紹介されています。 完全開示記事 DEFCON31 スライド この脆弱性をさらに自動化するためのリポジトリが Alex Linov によって公開されています。 https://github.com/AlexLinov/sipxcom-RCE 目的 CVE-2023-25355 は、sipXcom サーバー上のファイルが攻撃者が制御する Web サーバーにアップロードされる、外部送信 exfiltration メカニズムです。...

holos

KVM을 위한 Docker compose. 하나의 YAML 파일로 다중 VM 스택을 정의합니다. libvirt도, XML도, 분산 제어 플레인이 필요 없습니다. 웹사이트 및 문서: https://zeroecco.github.io/holos/ 기본 단위는 컨테이너가 아니라 VM입니다. 모든 워크로드 인스턴스는 자체 커널 경계, qcow2 오버레이, cloud-init 시드, 그리고 생성된 SSH 접근 권한을 갖습니다. 빠른 시작 Linux + /dev/kvm이 필요합니다. macOS 빌드는 validate, import,...

CVE-2026-97935

The Linux kernel contains a slab-use-after-free vulnerability in the tracing subsystem. The issue occurs because hist_register_trigger() adds a histogram trigger to the global named_triggers list before validating the trace clock. If the clock string is unknown, tracing_set_clock() fails, causing...

CVE-2026-97572

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...

witchcraft

🎉 당신의 OPSEC 동반자. witchcraft help 또는 witchcraft manual 전체 매뉴얼을 실행하세요 🎉 무엇을 하나요? WITCHCRAFT는 단순한 별칭 이상의 것입니다. busybox, 셸, 그리고 해킹, OSINT, 포렌식 등을 위한 자동화 엔진과 함께 작동하는 초기화 시스템입니다. 이름 witchcraft - 사이버 보안을 위한 다용도 툴킷. 개요 witchcraft 모듈이름 옵션... 파일... IP... 설명 WITCHCRAFT는 NET 깊숙이 들어가는 러너들을 위해 만들어진 사이버덱 툴킷입니다...

f_hid-4.14-backports

fhid backports for Linux 4.14.190 SM-A525F Three fixes to drivers/usb/gadget/function/fhid.c, carried by hand to a 4.14.190 Android vendor kernel and verified on the device they run on. 4.14 is end-of-life. No stable backport exists for any of these, and none is coming. That is the whole reason...

CVE-2026-33725

CVE-2026-33725 CVE-2026-33725の概念実証エクスプロイト。MetabaseのEEシリアライゼーションインポートにおけるH2 JDBC INITインジェクションを介したリモートコード実行および任意ファイル読み取りです。 影響を受けるバージョン Metabase Enterprise ≥ v1.47 かつ v1.54.22 Metabase Enterprise ≥ v1.54.0 かつ v1.54.22 Metabase Enterprise ≥ v1.55.0 かつ v1.55.22 Metabase Enterprise ≥ v1.56.0 かつ v1.56....

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

Linux Distros Unpatched Vulnerability : CVE-2026-97521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used...

Oracle Linux 8 : postgresql:12 (ELSA-2026-69924)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69924 advisory. - Add backport of CVE-2025-8714 Orabug: 38667546 - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670...

CVE-2026-96276

If a malicious SDK container declares an extension point with a crafted directory path, and a developer runs flatpak build-init --writable-sdk --sdk-extension with that SDK, attacker-chosen files could be written outside the working directory, since the target path is resolved via a function that...

CVE-2026-96276

The Flatpak tool is vulnerable to an arbitrary write in the host context via the flatpak build-init --writable-sdk --sdk-extension command. A malicious SDK container can declare an extension point with a crafted directory path containing .. traversal sequences. Because the target path is resolved...

CVE-2026-96276

If a malicious SDK container declares an extension point with a crafted directory path, and a developer runs flatpak build-init --writable-sdk --sdk-extension with that SDK, attacker-chosen files could be written outside the working directory, since the target path is resolved via a function that...

postgresql:12 security update

12.22-10.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-10 - Backport fixes for multiple CVEs - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679 - Resolves: CVE-2026-14680, CVE-2026-1574...

CVE-2025-32463_PoC

CVE-2025-32463 NVD CVE-2025-32463 ほとんどの場合、対象サーバーにはGCCがデフォルトでインストールされていません 。 このProof of Concept（PoC）は、影響を受けるシステム上で即座に実行できるよう、プリコンパイル済みのバージョンを提供します。 使用方法 1. woot1337.c ファイルをコンパイルします： root@kitploit: gcc -shared -fPIC -Wl,-init,woot -o libwoot1337.so woot1337.c 2. .soファイルをC配列（バイト形式）に変換します：...

cve-2026-41042

CVE-2026-41042: Apache Gravitino 1.2.1 認証なし RCE CVE-2026-41042 の自己完結型・標準ライブラリのみの概念実証（PoC）：Apache Gravitino 1.2.1 以前における、H2 JDBC の INIT 接続設定を介した認証なしのリモートコード実行。認証ヘッダー不要、追加ドライバー不要、pip install 不要。 root@kitploit: python3 poccve-2026-41042.py http://127.0.0.1:8090 --metalake testml --cmd whoami このスクリプト...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cloud-init (UTSA-2023-002186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002186 advisory. Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate...

EPScalate

EPScalate QuickHeal의 Seqrite Enterprise Endpoint Security Solution EPS에서 발생하는 권한 상승 취약점입니다. 이 취약점에는 CVE-2023-31497 CVE ID가 할당되었습니다. https://user-images.githubusercontent.com/39941993/230790056-87157751-b96c-49a6-81df-bf3126acfbd6.mp4 공급업체 및 제품 세부 정보 공급업체 : Quick Heal Technologies Limited 제품 :...

CVE-2025-56819

CVE-2025-56819 Datart v.1.0.0-rc.3 に問題があり、リモート攻撃者が INIT 接続パラメータを介して任意のコードを実行できます。 root@kitploit: POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type": "JDBC", "properties": "dbType": "H2", "url":...

CVE-2025-24132-Scanner

EN | KR 📄 概要 このツールは、mDNS（Zeroconf）を介してローカルネットワーク上のAirPlay対応デバイスを検出し、CVE-2025-24132 “ゼロクリック” HTTP RCE脆弱性がないかテストします。検出されたデバイスはシンプルなGUIに一覧表示され、デバイスをクリックすると取得したすべてのプロパティを表示できます。 前提条件 Python 3.7+ PyQt5 zeroconf パッケージ（pip install zeroconf） インストール root@kitploit: pip install PyQt5 zeroconf または...