CVE-2026-6103

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: 终极可执行文件压缩器 Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser https://upx.github.io 欢迎 欢迎...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

zclaw

zclaw El asistente personal de IA más pequeño posible para ESP32. zclaw está escrito en C y se ejecuta en placas ESP32 con un presupuesto estricto de firmware todo incluido de = 888 KiB en la compilación predeterminada. Admite tareas programadas, control GPIO, memoria persistente y composición de...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

vbsmin

VBSmin VBScript minifier Features ⬜️ Remove extra whitespace Trailing whitespace Leading whitespace Blank lines Inline extra spaces 💬 Remove comments Single quote start of the line Single quote inline REM 1️⃣ One-line Line splitting underscore Colon Quick start Quick install root@kitploit: $ gem...

dive

dive 一个用于探索 Docker 镜像、层内容以及发现缩小 Docker/OCI 镜像大小方法的工具。 要分析一个 Docker 镜像，只需使用镜像标签/ID/摘要运行 dive： root@kitploit: dive 或者你可以直接通过 Docker 使用 dive： root@kitploit: alias dive="docker run -ti --rm -v /var/run/docker.sock:/var/run/docker.sock docker.io/wagoodman/dive" dive 例如 dive nginx:latest...

CVE-2026-97911

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register...

CVE-2026-98142

The Linux kernel contains a vulnerability in the cirrus-qemu driver where it fails to verify that the PCI BAR0 resource size matches the expected CIRRUS_VRAM_SIZE (4 MB) during the probe process. If a device with a BAR0 smaller than 4 MB is bound, the driver may allow the creation of framebuffers...

CVE-2026-98142

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-98126

A vulnerability in the Linux kernel smb/client allows a file to grow beyond the caller's file-size limit. When FALLOC_FL_ZERO_RANGE is used without FALLOC_FL_KEEP_SIZE , the smb3_zero_range() function may extend the EOF without checking RLIMIT_FSIZE . The issue is resolved by calling inode_newsiz...

EUVD-2026-86957

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOCFLZERORANGE is used without FALLOCFLKEEPSIZE, smb3zerorange may extend EOF without checking RLIMITFSIZE, allowing the file to grow beyond the caller's file-size limit. Fix th...

CVE-2022-30136

CVE-2022-30136 Prueba de concepto de explotación remota de Windows Network File System autor: Ricardo Narvaja Solo con fines de demostración. El exploit completo funciona en sistemas Windows Server vulnerables. Consulta el artículo Análisis de CVE-2022-30136 “Vulnerabilidad de Windows Network Fil...

CVE-2026-97930

In the Linux kernel, the following vulnerability has been resolved: A...

CVE-2026-97912

In the Linux kernel, the following vulnerability has been resolved: a...

EUVD-2026-86766

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

CVE-2026-97911

In the Linux kernel, the following vulnerability has been resolved: a...