Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: qca – fixed an issue where information was leaked when fetching the fw build id. Added missing sanity checks and moved the 255-byte build-id buffer off the stack to prevent the leakage of stack data through debugfs,...

bluez

BlueZ - Linux 蓝牙协议栈 版权所有 C 2000-2001 Qualcomm Incorporated 版权所有 C 2002-2003 Maxim Krasnyansky [email protected] 版权所有 C 2002-2010 Marcel Holtmann [email protected] 编译与安装 为了编译蓝牙工具，你需要以下软件包： - GCC 编译器 - GLib 库 - D-Bus 库 - udev 库（可选） - readline（命令行客户端） root@kitploit: 在基于 Debian...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

CVE-2019-10475

CVE-2019-10475 Quick POC for Jenkins CVE-2019-10475 / SECURITY-1490 reported on 2019-10-23. The issue is within the build-metrics plugin which generates some basic build metrics. It's commonly used with the Jenkins sidebar links plugin. This is a simple & generic reflected XSS vulnerability. The...

CVE-2020-1034

CVE-2020-1034 PoC demonstrating the use of cve-2020-1034 for privilege escalation. Tested on unpatched Windows 10 2004, build 19041.488. Vulnerability was dicovered by Microsoft and fixed on patch Tuesday 8/9/2020: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1034 Writeup...

CVE-2026-33017

CVE-2026-33017 - Langflow Unauthenticated RCE ⚠️ DISCLAIMER: This repository is for authorized security testing and educational purposes only. Use only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this tool. Overview...

libunwind_CVE-2015-3239_After

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

CVE-2025-26399

CVE-2025-26399 ¿Cómo funciona este método de detección? Este script detecta instancias de SolarWinds Web Help Desk vulnerables a CVE-2025-26399 solicitando la página de inicio de sesión de Helpdesk, confirmando identificadores de producto en la respuesta, extrayendo el token de compilación...

xz-backdoor-research

CVE-2024-3094 Research Toolkit By Nikolaos Natsopoulos , IAM Consultant Interactive browser-based tool accompanying the research report: "CVE-2024-3094: Supply Chain Compromise via Social Engineering and Build System Manipulation in XZ Utils" 10.5281/zenodo.20700609 About In March 2024, a backdoo...

CVE-2026-43284-Dirty-Frag

CVE-2026-43284 Dirty Frag Pre-compiled exploit for CVE-2026-43284 Dirty Frag. Original source code from V4bel/dirtyfrag. Build root@kitploit: make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Download Download pre-built binaries from Releases. Supported...

certighost-cve-2026-54121-slides

Certighost Slidev deck This directory contains the Slidev presentation for CVE-2026-54121.md. root@kitploit: npm install npm run dev Other commands: root@kitploit: npm run build npm run export The source deck is slides.md. Deck-wide styling is in style.css, and Mermaid settings are in...

CVE-2026-43499-so-build

This repository does not have a README...

cve-2016-10033-45

To build the dockers: $ sudo docker build . -t ep4/5.2.17 change 5.2.17 to 18 and 20. to run the dockers: $ sudo docker run -p 7001:80 ep4/5.2.17 change to 7001/7002/7003 and 5.2.17/18/20 in the respective folders...

CVE-2022-0847-Dirty-Pipe

CVE-2022-0847 Dirty Pipe Pre-compiled exploit for CVE-2022-0847 Dirty Pipe. Original source code from haxx.in/dirtypipe. Build root@kitploit: make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Download Download pre-built binaries from Releases. Supported...

nginx-1.4.0

nginx-1.4.0 用于 CVE-2013-2028 的分析 漏洞利用：exp-nginx.rb 二进制文件（用于 ROP 构建）：nginx...

OpenSC

OpenSC documentation Wiki is available online Please take a look at the documentation before trying to use OpenSC. Build and test status of specific cards: Cards| Status ---|--- CAC| Coolkey|...

Langflow < 1.9.0 - Remote Code Execution

Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...

SmarterMail - Remote Code Execution

SmarterTools SmarterMail build 9511 contains an unauthenticated remote code execution caused by malicious OS command execution via ConnectToHub API method, letting remote attackers execute arbitrary commands, exploit requires no authentication. id: CVE-2026-24423 info: name: SmarterMail - Remote...

CVE-2023-20052

CVE-2023-20052 Exploit - Fixed Build Fixed Docker build for CVE-2023-20052 ClamAV XXE vulnerability that actually compiles. What Was Broken The original exploit fails to build on modern systems: ❌ OpenSSL 3.0 compatibility errors ❌ HMACCTX struct incomplete type errors ❌ Implicit function...

cve-2024-3094

🛡️ Cybersecurity Project: Analyzing the XZ Backdoor in liblzma 📄 Overview This project analyzes the high-profile backdoor discovered in xz-utils liblzma , affecting versions 5.6.0 and 5.6.1. The malicious code introduced into the upstream build system targeted SSH authentication by modifying how...