kali-docker

官方 Kali Linux Docker 此 Kali Linux Docker 镜像提供最新版 Kali Linux 滚动发行版的最小基础安装。此镜像未添加任何工具，因此你需要自行安装它们。 有关 Kali Linux 元软件包的详细信息，请查看 https://www.kali.org/blog/kali-linux-metapackages/。 每周更新 Docker 镜像每周更新，并推送到 Docker Hub，地址为 https://hub.docker.com/u/kalilinux。 你可以根据需要，使用 Docker 或 Podman 运行这些镜像：...

CVE-2026-67394

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access or allowed to change their own shell access to...

CVE-2026-67394

Plesk for Linux versions 18.0.34 through before 18.0.79.9 and 18.0.80.5 are affected by a critical local privilege escalation via OS command injection (CVSS 4.0: 9.0). An attacker who already has shell access (or is allowed to change their own shell) can escalate to the root account on the hostin...

EUVD-2026-68921

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access or allowed to change their own shell access to...

CVE-2022-0847

CVE-2022-0847 原文アドレス https://dirtypipe.cm4all.com/ 使用方法 gcc exploit.cpp -o exploit ./exploitこれによりrootシェルが起動します。 脆弱性の説明 これはCVE-2022-0847であり、5.8以降のLinuxカーネルにおける脆弱性です。任意の読み取り専用ファイルのデータを上書きすることが可能です。これにより、非特権プロセスがルートプロセスにコードを注入できるため、権限昇格が発生します。 CVE-2022-0847を使用してルートパスワードを消去する この脆弱性はLinux...

CVE-2020-8423

CVE-2020-8423 https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment に基づく研究 hook.c はカスタマイズされています（特に open） vmlinux バージョン 2.6.31...

DECEIVE

DECEIVE DECEIVE（DECeption with Evaluative Integrated Validation Engine...

CVE-2023-1829

CVE-2023-1829 该利用已在 Ubuntu22.04 官方源码 5.15.0-25.25 上测试通过 安装一些 netlink 过滤器函数所需的依赖包 root@kitploit: sudo apt install libnftnl-dev libmnl-dev 构建步骤： root@kitploit: make 参考 https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main...

CVE-2024-6387

0.まとめ これは本質的に統計的な脆弱性です。競合状態に勝ち、任意のコードを実行するには膨大な試行が必要であり、攻撃者は多くの障害を克服しなければなりません。Schwartz氏はSecurityWeekに語った。「たとえ最良の場合でも、最も有名な脆弱性でも実行には4時間以上かかります。」 OpenSSH 9.8 のリリースノートにおいて、開発者はこの脆弱性がglibcベースの32ビットLinuxシステムでのみ確認されており、OpenBSDは影響を受けないと述べています。 1.環境構築 環境構築はDockerを使用 1.1.Dockerfileの作成 root@kitploit: FROM...

Alibaba Cloud Linux 3 : 0260: isns-utils (ALINUX3-SA-2026:0260)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0260 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55995: A Double Free vulnerability in...

Alibaba Cloud Linux 3 : 0274: pam (ALINUX3-SA-2026:0274)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0274 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54411: Linux-PAM through 1.7.2 contains an...

Linux Distros Unpatched Vulnerability : CVE-2026-84125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-84131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15,...

Alibaba Cloud Linux 3 : 0258: libarchive (ALINUX3-SA-2026:0258)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0258 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14164: A double free issue has been...

Linux Distros Unpatched Vulnerability : CVE-2026-84269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2111)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2111 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicio...

GLSA-202609-01 : Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202609-01 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux kernel futex priority-inheritance use-after-free local privilege escalation PoC, ported to the OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. DISCLAIMER / 免责声明 This project is for authorized security research an...

CVE-2026-68138

CVE-2026-68138 — Linux 内核 net/sched qdisc 速率表 UAF 跟踪站点 CVE-2026-68138 补丁状态跟踪器的来源：一个单页站点，记录哪些发行版已为 Linux 内核中 net/sched qdisc 速率表的释放后使用 / 双重释放（use-after-free / double-free）漏洞发布了修复。 事实所在 关于该漏洞的所有信息——CVE ID、受影响版本和已修复版本、上游修复提交、发现与披露致谢，以及当前各发行版的补丁状态——均属于跟踪器页面，而非本 README： 渲染页面：...

kali-preseed-examples

Kali Preseed 示例 Debian preseed 文件是用于自动化安装和配置基于 Debian 的发行版的有用工具。Kali 可以利用这些文件，通过无人值守、定制化、一致性的安装来加速安装过程。有关 preseed 文件的更多信息，请参阅 Debian 安装指南 或 Debian preseed 示例文本文件。 虽然定制 preseed 文件的方法有很多，已安装的软件包还能提供更多选项，但本仓库将用于托管并允许创建更简单的文件，这些文件允许对 Kali 安装选项进行轻度定制。 使用 Preseed 文件 关于使用 preseed 文件的非常深入且有帮助的指南，我们可以参考...