Security Bulletin: IBM Guardium Data Protection is affected by vulnerability (CVE-2026-84249)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-84249 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function...

CVE-2023-32233-reproduction

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root-Cause Analysis What this repo is: my hands-on reproduction and study of CVE-2023-32233, a use-after-free in the Linux kernel Netfilter nftables subsystem that allows local privilege escalation, publicly disclosed in May 2023 by Patryk...

CVE-2026-88017

A flaw was found in rclone, a command-line program for syncing files to cloud storage providers. The FTP authentication proxy driver improperly handles user credentials across sessions. If two users share the same username but are linked to different storage backends, a later login can overwrite...

CVE-2026-41179

CVE-2026-47668 Test environment for rclone RCE REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q REF2: https://github.com/pssec-io/CVE-2026-41179 rce.py RCE on /operations/fdinfo, redirects output to stderr for convenience root@kitploit: ./rce.py uname -a exit status ...

CS-Remote-OPs-BOF

Remote Operations BOF This repo serves as an addition to our previously released SA repo. Our original stance was that we would not release our tooling that modified other systems, and we would only provide information gathering tooling in a ready to go format. Over time, we have seen many other...

linux-malware-detect

Linux Malware Detect LMD Linux 恶意软件扫描器 — 多阶段威胁检测（MD5、SHA-256、HEX、YARA、统计分析），ClamAV 集成，实时 inotify 监控，隔离/清除/恢复操作，以及多渠道告警（电子邮件、Slack、Telegram、Discord）。 C 2002-2026, R-fx Networks C 2026, Ryan MacDonald 依据 GNU GPL v2 许可 2.0.1 新特性 原生扫描引擎提速 43 倍 — 原生扫描流水线已使用批量并行处理完全重写。基于约 10,000 个文件的真实基准测试： 版本| 运行时间| 文...

CVE-Wazuh

Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...

windows-api-function-cheatsheets

Windows API 函数速查表 联系方式 🌨️ Tetsuo: https://www.x.com/tetsuo 目录 Windows API 函数速查表 文件操作 进程管理 内存管理 线程管理 动态链接库（DLL）管理 同步 进程间通信 Windows 钩子 加密 调试 Winsock 注册表操作 错误处理 资源管理 Unicode 字符串函数 字符串长度 字符串复制 字符串拼接 字符串比较 字符串搜索 字符分类与转换 Win32 结构体速查表 常用结构体 Win32 套接字结构体速查表 winsock.h Win32 套接字结构体速查表 winsock2.h Win32...

grapl

Grapl Grapl es una plataforma SIEM basada en grafos, construida por y para ingenieros de respuesta a incidentes. AVISO Grapl ha cesado operaciones como empresa. Por lo tanto, este código ya no se desarrolla activamente, pero permanecerá disponible en un estado archivado. Detalles Grapl aprovecha...

CVE-2026-54618

Obsidian Web MCP , a remote MCP server for Obsidian vaults, contained an authentication bypass prior to version 0.2.0. The /oauth/authorize endpoint issued an authorization code without any login, consent, or session check, and /oauth/token allowed exchanging that code for the static VAULT_MCP_TO...

CVE-2026-50605

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to...

CVE-2026-50605 Privilege Escalation Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to...

CVE-2026-50605

CVE-2026-50605 affects the Acer Agent Service component bundled with NitroSense and PredatorSense software. The root cause is insufficient access controls within a privileged service, allowing an authenticated local user to perform unauthorized registry operations, which may lead to privilege esc...

EUVD-2026-81394

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to...

CVE-2026-24418

CVE-2026-24418: OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module Overview...

autorootlinux

autorootlinux A Linux script to obtain root privileges based on CVE-2026-31431 This script is for learning purposes only. Please use it in a test environment kernel operations carry risks Usage: root@kitploit: chmod +x main.sh ./main.sh...

CVE-2024-4577

lol CVE-2024-4577 1. exploit command RCE value root@kitploit: python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory find...

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...