Important: Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update

An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-9074-PoC

Docker API Unauthenticated RCE CVE-2025-9074 डॉकर डेस्कटॉप में CVE-2025-9074 नामक एक गंभीर भेद्यता स्थानीय रूप से चलने वाले लिनक्स कंटेनरों को डिफ़ॉल्ट सबनेट 192.168.65.7:2375 के माध्यम से डॉकर इंजन एपीआई से कनेक्ट करने में सक्षम बनाती है। यह समस्या बढ़ी हुई कंटेनर आइसोलेशन ECI या TCP एक्सपोज़र...

bbot v3.0.2

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SharpPrivesc

SharpPrivesc Praticando C e reunindo as superfícies de ataque de Privesc. Ainda é coisa de noob. Verificações de Privesc e afins. Preferi as classes de análise de linha de comando do Spectreops, então decidi utilizar as deles em vez de outros pacotes .net como command line parser, etc. A fazer:...

CVE-2026-34908-check

Script de Detecção de Cadeia RCE Não Autenticada no UniFi OS Server Um detector seguro para a cadeia de execução remota de código não autenticada no UniFi OS Server ≤ 5.0.6, divulgada no Boletim de Aviso de Segurança 064 da Ubiquiti: CVE| Classe| Papel na cadeia ---|---|--- CVE-2026-34908 /...

CVE-2026-78122-POC

CVE-2026-78122 — प्रूफ ऑफ कॉन्सेप्ट Tecnativadocker-socket-proxy ≤ 0.5.0 — अपर्याप्त एक्सेस-नियंत्रण ग्रैन्युलैरिटी CWE-1220 CVSS 4.0: 8.3 उच्च — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N हमला वेक्टर एडजेसेंट आसन्न है AV:A: हमलावर को प्रॉक्सी तक लोकल/आसन्न नेटवर्क पहुँच की...

CVE-2026-58455-PoC

CVE-2026-58455 — Dockwatch: ثغرة تنفيذ أكواد عن بُعد غير مصادق عليها تجاوز المصادقة + حقن أوامر إثبات فكرة لـ CVE-2026-58455 : تنفيذ أكواد عن بُعد غير مصادق عليه في Dockwatch من Notifiarr، وهي واجهة ويب ذاتية الاستضافة لإدارة حاويات Docker. يؤثر على جميع الإصدارات حتى 0.6.567. السبب الجذري تم...

andor

andor Blind SQL Injection Tool with Golang Usage Download andor.go and go to the folder where the file andor.go located. And type this to command prompt: go run andor.go --url "http://deneme.com/index.php?id=1" Note: Get parameter value must be correct, otherwise it will not work...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

bbot

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

CVE-2021-3156-without-ip-command

CVE-2021-3156-बिना-ip-कमांड worawit/CVE-2021-3156 exploitnss.py का फोर्क, ip कमांड के बजाय ifconfig के साथ काम करने के लिए संशोधित root@kitploit: wget https://github.com/Bad3r/CVE-2021-3156-without-ip-command/raw/refs/heads/main/exploitnss.py or wget https://cdn.unsigned.sh/exploitnss.py...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

EUVD-2026-65007

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-39987.py

CVE-2026-39987.py Este script Python explora o endpoint vulnerável marimo /terminal/ws e retorna um shell interativo. COMO USAR : A única alteração que precisa ser feita é mudar a variável HOST no script. Após alterar a variável HOST, execute o script no seu Terminal como no exemplo abaixo: EXEMP...