Linux Distros Unpatched Vulnerability : CVE-2026-89560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this...

Linux Distros Unpatched Vulnerability : CVE-2026-89701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: validate nseconds in TIMEDELEG decode paths The xdrgen-based TIMEDELEGACCESS and TIMEDELEGMODIFY decode arms store a raw uint32t nseconds directly into...

Linux Distros Unpatched Vulnerability : CVE-2026-89566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbd2: check needresched when skipping busy checkpoint buffers journalshrinkonecplist skips busy checkpoint buffers when called with JBD2SHRINKBUSYSKIP. The...

CVE-2026-89525

A flaw was found in the Linux kernel. A local attacker could craft a malicious Universal Disk Format UDF image to trigger an out-of-bounds read vulnerability in the udfgetpblockvirt15 function. This occurs when the system attempts to read a Virtual Allocation Table VAT index equal to the entry...

CVE-2026-89610

A flaw was found in the Linux kernel's NTFS component. The mapping pairs decoder fails to verify if a run length extends beyond the volume boundary. A local attacker could exploit this by providing a malformed NTFS image with a crafted mapping pairs array. This could lead to memory corruption and...

VMWare-CVE-Check

VMWare-CVE-Check Usage: ./example.py/sh list.txt...

CVE-2026-23111-POC-noddlenpottato

CVE-2026-23111 — noddlenpottato nftables catchall UAF → unprivileged LPE. user to root on most 5.10—6.18 linux kernels. auto-adapts to the target kernel — detects struct offsets, resolves symbols, finds ROP gadgets, determines slab cache, generates tailored exploit, compiles and runs. nftables...

CVE-2026-89694

A flaw was found in the Linux kernel's NFSv4.2 server nfsd. An authenticated NFSv4.2 client could exploit a vulnerability in the managecpntfstate function by guessing a state identifier. This improper ownership check allows the client to cancel and free another client's copy-notify stateid, leadi...

xz-backdoor-CVE-2024-3094-Check

xz-backdoor-CVE-2024-3094-Check Verifica si tu versión instalada de xz-utils es vulnerable al backdoor CVE-2024-3094. Esta comprobación es para Kali Linux u otras instalaciones basadas en Debian. Uso root@kitploit: git https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check.git cd...

CVE-2026-89439

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST driver. A missing NULL check for isstcommon.sstinst during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vulnerability could lead to a system crash, resulting in a Denial of...

Check-Point_poc

Check-Pointpoc Vulnerabilidad de lectura arbitraria de archivos en Check-Point Security Gateway CVE-2024-24919 python Check-Pointpoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | /...

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

Summary A FILE response whose filePath embeds request data e.g. "/srv/public/queryParam 'name'", the documented way to let the client pick a file is confined by getSafeFilePath with resolvedPath.startsWithstaticBaseDir. That prefix test has no path-separator boundary, so a ../-escaped path whose...

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

CVE-2026-45057

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...

CVE-2026-47773

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773

ArduinoBLE (the Arduino library providing Bluetooth Low Energy connectivity on certain Arduino models) is vulnerable to memory corruption in versions prior to 2.0.2 . The root cause is a missing bounds check in the ATT layer write request handler, allowing a remote, unauthenticated BLE client to ...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Remote Code Execution Description The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated...

CVE-2026-89766

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...