CVE-2026-21756

creationtimestamp| type| source ---|---|--- 2026-08-24 15:51:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mttnverusu2b...

CVE-2026-78365

creationtimestamp| type| source ---|---|--- 2026-08-24 14:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtti3z33ag25 2026-08-24 14:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtti7icdwg2c...

CVE-2026-32558

creationtimestamp| type| source ---|---|--- 2026-08-24 14:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtthnofrxi2e 2026-08-24 14:07:32+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtti2wpmhd2e 2026-08-25 17:03:34+00:00| seen|...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

Tracking PavinLoader across ClickFix and fake download campaigns

In our previous analysis of the malicious RenPy campaigns, we identified a multi-stage loader deployed as part of the infection chain. Further threat hunting has since shown that the same loader, which we track as PavinLoader , is being used across several different campaigns, including ClickFix...

longtongue

Generate customized Password/Passphrase wordlist based on target information Coded with 💙 by edoardottt Share on Twitter! Installation ⬇️ pipx root@kitploit: pipx install longtongue Source root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

CVE-2026-10618

Hugo versions 0.93.0 through 0.165.0 are affected by a stored cross-site scripting vulnerability in the default fenced-code-block renderer. The root cause is in markup/internal/attributes/attributes.go: the New function converts attribute values from byte slices to strings before storage, bypassi...

CVE-2026-76172

creationtimestamp| type| source ---|---|--- 2026-08-24 10:11:24+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtt2uomns22b...

CVE-2026-74712

A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...

CVE-2026-66897

creationtimestamp| type| source ---|---|--- 2026-08-24 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f 2026-08-24 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150018844317018 2026-08-24 10:30:29+00:00| seen|...

CVE-2026-68959

creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:31+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 09:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvjzt2arz2z...

CVE-2022-1015-1016

CVE-2022-1015 & CVE-2022-1026 Questo README.md è una traduzione del blog di David. David ha trovato i CVE 1015 e 1016 nel kernel Linux. Puoi visitare la sua pagina web per leggere il documento originale. Ecco i suoi profili social: Twitter Github Un'analisi delle due nuove vulnerabilità Linux in...

CVE-2026-78255

creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...

CVE-2026-78202

creationtimestamp| type| source ---|---|--- 2026-08-24 08:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2kdunt7esf746 2026-08-24 10:01:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtt2dlmjhv2i...

CVE-2026-78201

creationtimestamp| type| source ---|---|--- 2026-08-24 08:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7c22yiug4wv4q...

CVE-2025-44810

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99427 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-78211

creationtimestamp| type| source ---|---|--- 2026-08-24 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtsjzuowpg2f 2026-08-24 08:15:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78211...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

Security update for Multi-Linux Manager Client Tools - Monitoring stack

This update fixes the following issues: golang-github-prometheus-alertmanager: CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 bsc1266615 golang-github-prometheus-prometheus updated from version 3.5.3 to 3.5.4: Security fixes:...