Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073374 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053199 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: Use setbit and testbit at worker-flags Utilize setbit and testbit on worker-flags...

Roundcube -- Multiple vulnerabilities

The Roundcube project reports: CSS declaration smuggling via un-encoded ampersand emission CSS property injection via body background attribute email header injection via bare CR in the subject field email header injection via C-escape \r in the recipient display name email header injection via...

cve-2021-38647

cve-2021-38647 https://github.com/corelight/CVE-2021-38647 without the bloat CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod...

CVE-2026-55994

camel-iggy User-Header Injection Reproducer CVE-2026-55994 This project demonstrates a message-header injection in Apache Camel's camel-iggy component, tracked as CVE-2026-55994. The Iggy consumer copies an inbound message's user-headers onto the Camel Exchange without anyHeaderFilterStrategy, so...

SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 SAP RECON vulnerability Pffff! RECON Remotely Exploitable Code On NetWeaver? Guys, really? That was the best codename you came up with? : This scrip allows to check SAP LM Configuration Wizard missing authorization check vulnerability and as a PoC script...

arya

आर्या - द रिवर्स YARA आर्या एक अनोखा उपकरण है जो YARA नियमों को ट्रिगर करने के लिए छद्म-दुर्भावनापूर्ण फ़ाइलें बनाता है। आप इसे एक रिवर्स YARA की तरह सोच सकते हैं क्योंकि यह बिल्कुल उल्टा करता है – यह आपके नियमों से मेल खाने वाली फ़ाइलें बनाता है। आप आर्या और यह कैसे काम करता है, इसके बारे में...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

my-CVE-2021-1675

= Print Nightmare Analysis Report :imagesdir: Figures :toc: :icons: font :figure-caption: Figure :xrefstyle: short :pdf-theme: basic-theme.yml On June 29, 2021, a very severe Windows Print Spooler vulnerability was exposed as a 0-day, with a base score of 8.8, and was published on GitHub now...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 Zimbra — Collaboration Suite RCE --- Zimbra...

CVE-2024-51793

CVE-2024-51793 Exploit Tool Documentation 📋 Overview CVE-2024-51793 is an unauthenticated arbitrary file upload vulnerability in the Computer Repair Shop WordPress plugin versions prior to 3.8116. This vulnerability allows attackers to upload arbitrary files, including PHP webshells, without...

v8-sandbox-poc-clean

V8 Sandbox Escape PoC ⚠️ CRITICAL SECURITY WARNING ⚠️...

refinery

Binary Refinery root@kitploit: High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts that...

Mybb-XSS_SQL_RCE-POC

Mybb-XSSSQLRCE-POC Mybb में CVE-2021-27890 और CVE-2021-27889 को RSE पीओसी से जोड़ा गया उपयोग से पहले: यहाँ दो फ़ाइलें हैं: 1.js और attacklisten.py आपको इन दो फ़ाइलों को बदलना होगा: 1.js: mybb फ़ोरम URL और अटैक URL बदलें: root@kitploit: var bashurl = 'http://192.168.92.164/mybb/mybb-mybb1825' mybb...

CVE-2019-9624

CVE-2019-9624 Authenticated RCE for Webmin 1.9.0 Webmin 1.900 Authenticated RCE - CVE-2019-9624 Exploit 1. Vulnerability Description CVE-2019-9624 is an authenticated Remote Code Execution RCE vulnerability in Webmin versions up to 1.900. It allows an administrative user to execute arbitrary...

Node_CVE-2023-29017

CVE-2023-29017 | Remote Code Execution via vm2 Sandbox Escape WHS 4th Generation, Class 31 - Kim Geon-woo @gunwoo105 Vulnerability Summary vm2 is a Node.js sandbox library for executing untrusted JavaScript in a restricted environment. Under normal circumstances, code inside the sandbox should no...

CVE-2026-72898

CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection Metabase Pre-Authentication SQL Injection Leading to Admin Takeover Proof-of-concept for CVE-2026-72898, a critical unauthenticated SQL injection in Metabase's password-reset endpoint. The PoC injects a forged admin session row into the...

CVE-2026-13610

CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Gestión inadecuada de privilegios | Registro no autenticado con un rol de personal elegido por el atacante → divulgación de PHI del paciente Resumen Vulnerabilidad crítica en el plugin de WordPress KiviCare – Clinic & Patient...

CVE-2026-41940

🔥 CVE-2026-41940 – cPanel & WHM Auth Bypass ⚡ Unauthenticated Root – Session‑File CRLF Injection ⚡ “One chain to rule them all.” 🧠 The Exploit in a Nutshell root@kitploit: ┌─────────────────────────────────────────────────────────────┐ │ Stage 1 ── Mint a pre‑auth session cookie │ │ Stage 2 ── CR...

CVE-2025-29927-PoC

CVE-2025-29927 — Next.js Middleware 授权绕过 验证 PoC 一个用于本地授权靶场 （VMware：Ubuntu 靶机 + Kali 攻击机）验证 CVE-2025-29927 （Next.js Middleware Authorization Bypass）的小型 GitHub 项目。 ⚠️ 免责声明 ：本项目仅用于安全教育、CTF 与你自己拥有/明确授权的靶场环境 。 严禁用于任何未授权系统。因滥用本项目造成的后果由使用者自行承担。 📋 目录 1. 漏洞档案 2. 漏洞原理（30 秒看懂） 3. 仓库结构 4. 靶场拓扑（VMware...