Lucene search
+L

5915 matches found

Kitploit
Kitploit
added 2026/09/03 10:22 a.m.6 views

tricorne

Tricorne A Fedora Remix for offensive security. "My treasure? If you want it, I'll let you have it. Seek it out! I left everything at that place!" Gol D. Roger The short version Kali owns Debian. BlackArch owns Arch. Parrot owns the "security-focused desktop" niche. No one owns RPM-world offensiv...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:46 a.m.3 views

go-rpmdb

go-rpmdb 一个用于枚举 RPM 数据库 Packages 文件中软件包的库(无绑定)。 root@kitploit: package main import "fmt" "log" rpmdb "github.com/knqyf263/go-rpmdb/pkg" func main if err := run; err != nil log.Fatalerr func run error db, err := rpmdb.Open"./Packages" if err != nil return err pkgList, err := db.ListPackages if err...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 7:02 a.m.3 views

CVE-2024-22026

CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...

6.7CVSS6.9AI score0.01096EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 2:12 a.m.7 views

CVE-2026-41651

🚨 CVE-2026-41651 — Pack2TheRoot Privilege Escalation Vulnerability in PackageKit TOCTOU Race Condition 📌 Overview CVE-2026-41651 is a local privilege escalation vulnerability affecting the PackageKit system service used in various Linux distributions. The vulnerability is caused by a Time-of-Chec...

8.8CVSS7.2AI score0.0046EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/03 2:08 a.m.3 views

trivy-repo

trivy-repo deb/rpm repository for Trivy Debian/Ubuntu root@kitploit: $ sudo apt-get install wget apt-transport-https gnupg $ wget -qO - https://get.trivy.dev/deb/public.key | gpg --dearmor | sudo tee /usr/share/keyrings/trivy.gpg /dev/null $ echo "deb signed-by=/usr/share/keyrings/trivy.gpg...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 1:27 a.m.6 views

polkit-0.96-CVE-2021-4034

polkit-0.96-CVE-2021-4034 centos 7.x 已经有了 修复CVE-2021-4034 漏洞的RPM包,但没找到 centos 6.x的 自己参考 源代码 制作、打包 rpm redhat 已经修复 6.x,但没找到下载的地方 https://access.redhat.com/errata/RHSA-2022:0269 修复漏洞 root@kitploit: 下载 polkit-0.96-11.1.el6.x8664.rpm 升级 rpm -Uhv polkit-0.96-11.1.el6.x8664.rpm 测试漏洞是否修复 sh...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits154References2
Kitploit
Kitploit
added 2026/09/02 11:34 p.m.6 views

CVE_kernellinux_jsh

CVEkernellinuxjsh — kernelsec Framework Autor: jshDevs · Versión: 0.1.0-scaffold · Licencia: MIT Framework modular en Bash para auditar y remediar CVEs críticos del kernel Linux en distribuciones RPM-based AlmaLinux 8/9, Rocky Linux 8/9, CentOS Stream 8/9/10. CVEs cubiertos...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 8:53 p.m.4 views

CVE-2015-7547

CVE-2015-7547 glibc 脆弱性テストスクリプト これは、glibc の脆弱性 CVE-2015-7547 をテストするためのシェルスクリプトを提供します。Red Hat Enterprise Linux / RHEL / CentOS 5/6/7 のような rpm ベースのシステム向けに書かれています。他のディストリビューションの検出は今後追加される可能性があります。 解決方法 1. bin/test-glibc.sh を実行して、システムが脆弱かどうかを確認してください。 2. glibc パッケージを更新してください。 3...

8.1CVSS7.3AI score0.91057EPSS
SaveExploits17
NVD
NVD
added 2026/09/02 4:17 p.m.4 views

CVE-2026-84837

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

7.8CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/02 3:12 p.m.7 views

EUVD-2026-70108

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

7.8CVSS6AI score
SaveExploits0References2
CVE
CVE
added 2026/09/02 3:12 p.m.16 views

CVE-2026-84837

A command injection vulnerability was identified in rpm , specifically in the gettarspec function used by rpmbuild -t*. The root cause is an unescaped tarball path or filename that, when containing shell metacharacters, allows an attacker to inject arbitrary commands. This is particularly relevan...

7.8CVSS6AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/02 3:12 p.m.15 views

CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

7.8CVSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/02 3:12 p.m.3 views

CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

7.8CVSS6AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/02 3:12 p.m.6 views

CVE-2026-84837

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

7.8CVSS6AI score
SaveExploits0
OSV
OSV
added 2026/09/02 10:20 a.m.1 views

RHSA-2026:57415 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

7.5CVSS6AI score0.00568EPSS
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/02 8:49 a.m.4 views

tippa-my-tongue

Tippa My Tongue Tippa My Tongue 是一个利用 CVE-2022-1388 和 CVE-2022-41800 在 F5 BIG-IP 产品上建立 root 反向 Shell 的漏洞利用工具。大多数 CVE-2022-1388 利用工具通过 /mgmt/tm/util/bash 实现代码执行。然而,本工具使用了 /mgmt/shared/iapp/rpm-spec-creator,随后再使用 /mgmt/shared/iapp/build-package。这一方法最早由 Ron Bowes 在 AttackerKB 的这篇 分析文章...

9.8CVSS7.4AI score0.99958EPSS
SaveExploits68References1
Kitploit
Kitploit
added 2026/09/02 5:14 a.m.5 views

CVE-2026-64561-Kernel-Fix

中文 | English 中文 升级 Linux Kernel 修复 CVE-2026-64561 教程 声明: 本文仅记录本人服务器环境下的修复过程,并非安全专业分析。如有不当之处,欢迎指正。 一、简介 本文档提供两种方式将 Linux Kernel 升级,用于修复 CVE-2026-64561 :ELRepo RPM 安装(推荐)和源码编译。 项目| 说明 ---|--- CVE 编号| CVE-2026-64561 漏洞组件| Linux Kernel KVM/x86 修复方式| 升级 Linux Kernel(ELRepo RPM 或源码编译) 三、升级方法...

8.8CVSS6.4AI score0.00347EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-84233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes...

7CVSS0.0013EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/01 3:17 p.m.6 views

CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS0.0013EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/01 3:17 p.m.4 views

DEBIAN-CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6AI score0.0013EPSS
SaveExploits0References1
Rows per page
Query Builder