Printnightmare

Printnightmare Solución para PrintNightmare CVE-2021-34527 Ejecute el archivo disable-spooler.ps1 como administrador para deshabilitar el spooler root@kitploit: powershell.exe -executionpolicy bypass -file .\disable-spooler.ps1 Para deshabilitar por lotes, haga una lista de servidores con los...

OVSwrap-CVE-2026-64531-Mitigation-Tool

Herramienta de Mitigación OVSwrap CVE-2026-64531 Un script sencillo que detecta y mitiga la vulnerabilidad OVSwrap que afecta a los módulos del kernel de Open vSwitch. Características Detecta módulos vulnerables de Open vSwitch Determina si el módulo está cargado Bloquea la carga automática Elimi...

chackd

chackd chackd 是一个守护进程，每秒随机化内核参数 tcpchallengeacklimit，以防止侧信道攻击。 简介 最近展示的一种侧信道攻击引起了社区的广泛关注 1。对于许多服务器或智能手机设备，这种攻击被认为对 IPv4 连接是危险的。毫无疑问，内核将在后续版本中修复此问题。然而，某些管理员可能由于特定原因或仅仅因为懒惰而不更新内核。 将参数调整为非常高的值 2 可以正常工作。但另一方面，对于服务器应用程序，这可能会导致不必要的流量。为了防止这种情况，我编写了 chackd 程序。它可以配置以实现 1 中提出的解决方案。 chackd...

CVE-2017-11882-Blocker

CVE-2017-11882-Blocker A Windows driver that neutralizes CVE-2017-11882 : How it works This project is split into a kernel driver and a user-mode notification component that talk over a custom device using the inverted call model. Kernel driver 1. Process callback - DriverEntry registers a...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – 技术缓解工具集 1. 概述 本工具包为运行受影响内核（版本 4.14 至 6.12.84、6.13 至 6.18.21 等）的 Linux 系统提供自动化解决方案，用于 检测并缓解 CVE-2026-31431 漏洞（又名 Copy Fail ）。 该工具集包含： 一个 统一的 Bash 脚本 （mitigatecopyfail.sh），它能够： 运行 Phalanx-CCS （攻击面活跃性检测）和 Silent4Labs （风险评估）。 检测内核配置（CONFIGCRYPTOUSERAPIAEAD=m|y）。 应用相应的缓解措施：...

CVE-2024-3094

Utilidad de Verificación y Actualización de Vulnerabilidades de xz-utils Este script está diseñado para verificar vulnerabilidades en la versión instalada de xz-utils en su sistema. Si se detecta una versión vulnerable, el script ofrece descargar e instalar automáticamente una versión estable par...

Yellowkey-mitigation

Yellowkey-mitigation.ps1 es un script de PowerShell que automatiza el flujo de trabajo de mitigación de WinRE descrito en CVE-2026-45585, agrega verificación después de cada paso y no ejecuta el paso 6 reagentc /disable + reagentc /enable si algún paso anterior falla. También comprueba si el camb...

Orchestrated-Powershell-for-CVE-2023-24932

安全启动编排器 CVE-2023-24932 自动完成针对 CVE-2023-24932 BlackLotus 的完整安全启动缓解措施。自动处理所有注册表更改、重启和验证。 要求 Windows 10/11 或 Server 2016+ 管理员权限 已启用安全启动 已安装 2024 年 7 月及之后的累积更新 已备份 BitLocker 恢复密钥 如果 BitLocker 已启用 快速入门（单台服务器） root@kitploit: 1. 下载并安装（单行命令，以管理员身份在 PowerShell 中运行） irm...

CVE-2022-30190-NSIS

MSDT Patcher，又名 CVE-2022-30190-NSIS 这是一个 NSIS 脚本，用于部署和回滚 Microsoft 针对 CVE-2022-30190 推荐的缓解注册表补丁。 在此处下载可执行文件。 它是如何工作的？ 运行时，它会检查 HKCR\ms-msdt 键是否存在。如果该键存在，则假定机器存在漏洞，并提供应用缓解补丁的选项。如果用户确认，将删除整个 HKCR\ms-msdt 键层次结构，即执行相当于以下注册表补丁的操作： root@kitploit: Windows Registry Editor Version 5.00...

yc-mk8s-sctphantom-mitigation

Mitigación de SCTPhantom para Yandex Managed Kubernetes Aplicación automática de la mitigación para la vulnerabilidad CVE-2026-64564 SCTPhantom en el kernel de Linux en todos los worker nodes del clúster Yandex Managed Kubernetes. Descripción de la vulnerabilidad Identificador CVE CVE ID:...

cve_2026_frag_family_fix

Mitigazione delle vulnerabilità della famiglia frag / Strumento di mitigazione per la vulnerabilità della famiglia frag Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 Esegui la correzione su qualsiasi Linux / Esegui qualsiasi hotfix Linux root@kitploit:...

Exploit for CVE-2026-64531

OVSwrap CVE-2026-64531 Mitigation Tool A simple script that...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 Checker & Mitigator A simple, safe vulnerabili...

EUVD-2021-10061

Malware in sbrugna...

Vulnerabilities fixed in Trend Micro Apex One

Trend Micro has fixed vulnerabilities in the Apex One management console. The vulnerability in the management console allows a remote attacker without authentication to arbitrarily upload code and execute commands on affected installations. Both CVEs are similar, it just affects different CPU...

Design/Logic Flaw

An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable...

CVE-2021-22932

An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable...

Vulnerability fixed in Citrix ShareFile

Citrix has fixed a vulnerability caused by the CTX269106 mitigation tool for Citrix ShareFile storage zones controller. The tool disabled encryption when it was enabled. This would have allowed data to be stored and transmitted. Citrix has released updates to fix the vulnerability. More informati...

Citrix Systems Citrix ShareFile 处理逻辑错误漏洞

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems, Inc. A Processing Logic Error vulnerability exists in Citrix Systems Citrix ShareFile, which stems from the product no longer being able to select the Enable Encryption option when running the CTX269106 mitigation too...

Analyzing attacks taking advantage of the Exchange Server vulnerabilities

Microsoft continues to monitor and investigate attacks exploiting the recent on-premises Exchange Server vulnerabilities. These attacks are now performed by multiple threat actors ranging from financially motivated cybercriminals to state-sponsored groups. To help customers who are not able to...