CVE-2023-44487

HTTP2 Rapid Reset Attack: CVE-2023-44487 Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only 利用程序 快速利用程序，用于测试快速重置攻击（CVE-2023-44487）。注意：仅供教育目的。 目录 安装 使用 安装 使用Git将仓库克隆到本地计算机，安装Poetry，然后运行程序： root@kitploit: git clone...

snapchange

Snapchange Fuzzing ligero de una instantánea de memoria usando KVM Snapchange proporciona la capacidad de cargar un volcado de memoria en bruto y el estado de los registros en una máquina virtual VM de KVM para su ejecución. En un punto de la ejecución, esta VM puede restablecerse a su estado...

CVE-2023-26209

CVE-2023-26209 Exploit Automation Para Fins Educacionais 🚨 📌 描述 这是一个带有图形界面（Tkinter）的Python脚本，允许用户向登录端点自动发送请求进行测试。目的是模拟服务器对不同大小payload的响应，并分析可能存在的漏洞。 ⚠️ 此代码严格用于教育和学习目的。滥用可能违反法律和安全政策。作者对任何不当使用不承担责任。 🛠 功能 ✅ 允许输入目标IP并定义payload大小。 ✅ 向 /logincheck 端点自动发送请求。 ✅ 启动和停止按钮用于控制测试。 ✅ 使用线程并行运行，不会阻塞界面。 ✅...

CVE-2026-93203 batman-adv: bla: avoid CRC corruption due to parallel claim add

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadvblaaddclaim is used to add claims and modify the backbone of claims for CLAIM frames from remote backbones and local packets. When it handles a claim, it needs...

EUVD-2026-82311

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadvblaaddclaim is used to add claims and modify the backbone of claims for CLAIM frames from remote backbones and local packets. When it handles a claim, it needs...

CVE-2026-2395

CVE-2026-23950 Prueba de concepto para CVE-2026-23950 - Vulnerabilidad de condición de carrera en el paquete tar. Descripción Este repositorio demuestra una vulnerabilidad de condición de carrera en el paquete npm tar versión 7.5.3 que permite la colisión de archivos durante la extracción. La...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RISC-V: Ensure that port I/O string accessors actually work properly. Fixed port I/O string accessors such as insb’, outsb’, etc., which use the physical PCI port I/O address rather than the corresponding memory mapping to...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt – Fixed the hungtask issue for PADATARESET We identified a hungtask bug in testaeadveccfg as follows: INFO: Task cryptomgrtest:391009 was blocked for more than 120 seconds. Enabling the echo 0...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free remote desktop protocol library and clients. Clients based on FreeRDP on Unix systems that use the /parallel command-line switch may read uninitialized data and send it to the server to which the client is currently connected. Server implementations based on FreeRDP are not...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: padata: Always disable BHs when running -parallel. A deadlock can occur when an overloaded system runs -parallel within the context of the current task. The code structure is as follows: c padatadoparallel -parallel...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: comedi: c6xdigio: Fixed invalid PNP driver unregistration The Comedi low-level driver “c6xdigio” appears to be for a parallel port-connected device. When the Comedi core calls the driver’s Comedi “attach” handler c6xdigioattach t...

Astra Linux – Vulnerability in joblib

The joblib package from versions 0 and before 1.2.0 is vulnerable to Arbitrary Code Execution through the predispatch flag in the Parallel class, due to the eval statement...

Astra Linux – Vulnerability in Golang 1.19, Golang 1.23

Canceling a query for example, by canceling the context passed to one of the query methods during a call to the Scan method of the returned Rows can lead to unexpected results if other queries are being executed in parallel. This can cause a race condition, which may overwrite the expected result...

The vulnerability of the BTF_ID() function in the kernel/bpf/bpf_lsm.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the BTFID function in the kernel/bpf/bpflsm.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-83534

PostgreSQL Anonymizer contains a privilege escalation vulnerability in the anon.anonymize_database_parallel() function, allowing the owner of a table to execute arbitrary code with superuser privileges. The CVSS 3.1 score is 6.4 (MEDIUM) , with a network attack vector, high complexity, high privi...

CVE-2026-83534 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

EUVD-2026-72143

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

CVE-2026-83534 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053428 advisory. In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one devic...

PT-2026-86537

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize database parallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...