CVE-2026-22444

CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview This vulnerability was discovered and disclosed to Apache in 2025. It affects Apache Solr's core creation functionality, where network access to UNC paths occurs before path validation checks are performed. On Windows systems...

NewMachineAccount

NewMachineAccount Descripción general NewMachineAccount.exe es una herramienta simple independiente en formato exe para crear nuevas cuentas de máquina con una contraseña personalizada dentro de un dominio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain...

CVE-2025-49132

Escáner de Vulnerabilidades Independiente CVE-2025-49132 Implementación Sin Docker Este escáner opera directamente sobre Python sin dependencias de Docker, adecuado para entornos donde Docker no está disponible o no se prefiere. Instalación root@kitploit: pip install -r requirements-standalone.tx...

Agentic-Bug-Hunter

AI-powered bug bounty hunting - recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · Support · FAQ Built and maintained by AwareXone · Website · X · GitHub Support This Project If BugHunter helps your hunts, you can fuel more of them — every...

anviz-m3-rfid-cve-2019-11523-poc

Problemas de seguridad en Anviz M3 RFID Access Control Se han encontrado problemas de seguridad en el dispositivo Anviz M3 RFID Access Control cuando funciona en modo independiente conectado a una red TCP/IP, que podrían provocar la elusión del control de acceso y la fuga y alteración de...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2026-12858

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

CVE-2026-12858 Local privilege escalation vulnerability in ESET AV Remover

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

EUVD-2026-74776

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

PT-2026-88895

『the attacker would need to have previously obtained administrator rights to execute the attack, as the tool requires elevation to be run.』 CVE-2026-12858 CA9000 ESET Customer Advisory: Local privilege escalation vulnerability in ESET AV Remover fixed https://t.co/QLUsWHiBcZ...

CVE-2026-16723

Exploit CVE-2026-16723 Un'implementazione autonoma in C++17 per CVE-2026-16723 , una vulnerabilità critica che colpisce le versioni 1.2.68 – 1.2.83 di Fastjson. Requisiti Linux o WSL su Windows Compilatore compatibile con C++17 GCC 7+ o Clang 5+ CMake 3.10 o successivo Pacchetti di sistema:...

CVE-2026-24225

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure...

EUVD-2026-65605

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac – Fix for crashes occurring when sending Action Frames in standalone AP Mode Currently, whenever an Action Frame needs to be transmitted, the brcmfmac driver always uses the P2P vif to send the “actframe” IOVAR to...

CVE-2026-24329

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml...

CVE-2026-24329 Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml...

CVE-2026-68119 tcp: initialize standalone TCP-AO response padding

In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcpv4sendack and tcpv6sendresponse construct standalone TCP responses with TCP-AO options. The option length carries the actual MAC length, but the TCP header length includes the...

CVE-2026-68119

The CVE-2026-68119 issue concerns the Linux kernel TCP-AO implementation: when constructing standalone TCP responses with TCP-AO options, the TCP header padding is not fully initialized if the MAC length is not four-byte aligned. The function tcp_ao_hash_hdr() writes only the MAC, leaving 1–3 pad...

[SECURITY] Fedora 43 Update: perl-PAR-Packer-1.064-5.fc43

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

CVE-2026-48007

Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 report analytics data to a PostHog server, when configured to by a posthog key in config.json or by the posthogApiHost and posthogApiKey URL parameters. Several fields of this data $initialpersoninfo,...