go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

CVE-2022-28368-handler

CVE-2022-28368-handler 本仓库包含一个 Python 脚本，用于处理 dompdf 缓存字体漏洞（CVE-2022-28368）的大部分工作，你只需创建请求即可。它甚至还会提供一个触发字符串来启动漏洞利用 : 使用 root@kitploit: usage: CVE-2022-28368.py -h -d DOMPDFLOCATION -f FONTNAME -i HTTPIP -p HTTPPORT -P PHP -w -r This script handles the majority of the dompdf cached font exploit...

mscache

mscache a tool to manipulate dccdomain cached credentials in windows registry, based mainly on the work of mimikatz and impacket requirements python2 pycrypto passlib impacket example root@kitploit: python mscache.py --security security --system system dumping domain cached credentials reg query...

dnspooq

dnspooq DNSpooq 概念验证 - dnsmasq 缓存投毒 CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 仅供教育目的使用 要求 Docker compose Docker 利用 启动容器 root@kitploit: $ docker-compose up -d 运行 exploit.py root@kitploit: $ docker-compose exec attacker bash bash-5.0 python exploit.py 查询未缓存的名称... 生成伪造的数据包... 已投毒: b'google.com....

CVE-2025-14269

CVE-2025-14269 Se descubrió un problema de seguridad en la versión dentro del clúster de Headlamp donde usuarios no autenticados pueden reutilizar credenciales en caché para acceder a la funcionalidad de Helm a través de la interfaz de usuario de Headlamp. Los clústeres de Kubernetes solo se ven...

Linux Distros Unpatched Vulnerability : CVE-2026-89639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: use cifsinvalidatecache in cifsdotruncate for OTRUNC cifsdotruncate is invoked from cifsopen without irwsem, so it cannot use cifsresizefilelocked to...

CVE-2026-89639

This vulnerability affects the Linux kernel's CIFS (Common Internet File System) implementation. When a file is opened with O_TRUNC , the function cifs_do_truncate() is invoked without holding i_rwsem, preventing it from performing a proper fscache cookie resize . As a result, stale cached data c...

CVE-2026-18061 Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive files from application hosts that read cached query results,...

CVE-2026-86145

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

msi-search

MSI Search Windows almacena en caché los archivos MSI en C:\Windows\Installer\ con nombres de archivo aleatorios compuestos por letras y números seguidos de la extensión ".msi". Esta herramienta simplifica la tarea de los operadores de red team y los equipos de seguridad para identificar qué...

CVE-2026-88059

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's @angular/common HttpTransferCache can cache an authenticated response when Server-Side Rendering SSR and hydration u...

CVE-2018-7600

CVE-2018-7600 - Ejecución remota de código en Drupal 7 Una implementación en Rust del exploit CVE-2018-7600 dirigido a instalaciones vulnerables de Drupal 7 = 7.57. Esta CLI reproduce el siguiente flujo de PoC: envenena un formulario renderizable almacenado en caché a través de la ruta...

AZL-99726 CVE-2026-86145 affecting package pcre2 10.42-3

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

CVE-2026-86145

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

EUVD-2026-71836

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

CVE-2026-86145

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

Linux Distros Unpatched Vulnerability : CVE-2026-86145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size che...

PT-2026-86306

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.48 Description An out-of-bounds write occurs in the pcre2 dfa match function due to a missing size check when reusing a cached workspace block within a recursive Deterministic Finite Automaton DFA matching workspace...

SUSE CVE-2026-80734

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...