EUVD-2026-66500

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...

EUVD-2026-66497

In the Linux kernel, the following vulnerability has been resolved: drm/shmemhelper: Check VMA boundaries for PMD mappings In the -hugefault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries of the VMA. All other -hugefault handlers have similar checks and the...

EUVD-2026-66472

In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that structlen bytes remain in the buffer after the encoding header, but accepts structlen=0 as valid: cephdecodeneedp, end, 0, bad alwa...

CVE-2026-78138

The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sales-campaign's configuration for an arbitrary post ID, allowing any authenticated user Subscriber and above to read the Finale Lite WordPress plugin before 2.21.0's campaign...

CVE-2026-16569

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a stock-update operation through one of its REST endpoints, allowing any authenticated user, such as a customer or subscriber...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identifica potenziali vulnerabilità con controlli di sfruttamento CVE-2017-7921 o testando l'URI /onvif-http/snapshot?auth=YWRtaW46MTEK su indirizzi IP target utilizzando un approccio multi-thread per risultati più rapidi. Requisiti root@kitploit: python3 Python Pacakges =...

salt-vulnerabilities

साल्ट स्टैक प्रोफ़ाइल यह प्रोफ़ाइल यह सुनिश्चित करने के लिए जाँच करेगी कि आपकी साल्ट स्थापना एक स्तर तक पैच की गई है जो आपको CVE-2020-11651 और CVE-2020-11652 से बचाता है। यह यह सुनिश्चित करने के लिए जाँच करके ऐसा करता है कि पैकेज salt-api, salt-cloud, salt-master, salt-minion, salt-ssh,...

cve-2025-54874-poc

Riferimento https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ Ambiente di Test openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux Descrizione la catena di chiamate di funzioni è:...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2026-78138 Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_html

The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sales-campaign's configuration for an arbitrary post ID, allowing any authenticated user Subscriber and above to read the Finale Lite WordPress plugin before 2.21.0's campaign...

CVE-2026-78138

CVE-2026-78138 is a missing capability check in the Finale Lite WordPress plugin (versions

EUVD-2026-66883

The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sales-campaign's configuration for an arbitrary post ID, allowing any authenticated user Subscriber and above to read the Finale Lite WordPress plugin before 2.21.0's campaign...

CVE-2026-16569 ShopApper <= 0.4.62 - Subscriber+ Arbitrary Product Stock Update

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a stock-update operation through one of its REST endpoints, allowing any authenticated user, such as a customer or subscriber...

CVE-2026-16569

ShopApper (The Mobile App for WooCommerce) WordPress plugin versions through 0.4.62 (Patchstack reports affected up to 0.4.66) lack a capability check on a REST endpoint that handles stock-update operations. This allows any authenticated user with Subscriber role or higher to modify the stock qua...

EUVD-2026-66872

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a stock-update operation through one of its REST endpoints, allowing any authenticated user, such as a customer or subscriber...

WHOREPRESS

Controllore di login per Wordpress Installazione root@kitploit: npm install --global whorepress Utilizzo Assicurati di avere un elenco con il formato url:username:pass root@kitploit: whorepress list.txt Elenco degli argomenti Argomenti| Descrizione ---|--- --admin-only| controlla solo per...

CVE-2026-80524

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...

CVE-2026-21852-PoC

Demo Educativa sulle Vulnerabilità di Claude Code Questo progetto dimostra tre vulnerabilità divulgate da Check Point Research nel tool CLI Claude Code di Anthropic. È progettato per studenti e ricercatori di cybersecurity per comprendere come funzionano gli attacchi alla supply chain degli...

check-cve-2026-31431

Questo script è interamente generato da Claude. Non sono così esperto, mi serviva solo un piccolo script per verificare se i miei pochi server fossero vulnerabili o meno...

CMD_Bypass_Assessment

Analisi dei Metodi di Bypass di CMD CMD Bypass Method Analysis è uno script PowerShell che testa automaticamente i metodi di bypass di CMD sui sistemi Windows e valuta i risultati. Lo script controlla vari metodi di bypass di CMD e salva i risultati in un file di testo, fornendo raccomandazioni d...