1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424：1Panel Client Certificate Bypass RCE Vulnerability All-in-One Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operation and maintenance panel that provides a graphical interface for deploying websites, managing servers, and running...

CVE-2026-63030-POC

wp2shell — CVE-2026-63030 + CVE-2026-60137 سلسلة استغلال WordPress من نوع RCE ليوم واحد. بدون مصادقة. التقييم: CVSS 9.8. صفر تبعيات — Python 3.8+ والمكتبة القياسية فقط. الإصدارات المتأثرة الفرع| الإصدارات الضعيفة| الإصدار المصحح ---|---|--- 6.9.x| 6.9.0 – 6.9.4| ≥ 6.9.5 7.0.x| 7.0.0 – 7.0.1| ≥...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

من-موطئ-القدم-إلى-مسؤول-المجال-تسليح-CVE-2025-54918-في-العالم-الحقيقي-DevOps محاكاة استغلال وتخفيف أثر CVE-2025-54918 ثغرة NTLM في Windows. يتضمن سكربتات كشف، وتصحيحًا عبر Ansible، وتقوية لـ CI/CD. يوضح تصعيد الامتيازات من وصول منخفض المستوى إلى SYSTEM في بيئات سحابية هجينة. بقلم Mark Mallia مقدم...

cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack

A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link symlink with one of these predictable...

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

PressVector

🧨 PressVector — WordPress CVE-2026-63030 / CVE-2026-60137 Exploitation Framework ⚡ Advanced Pre-Auth RCE & Blind SQLi Exploitation Framework for WordPress Core 📌 Overview PressVector is a comprehensive, fully automated exploitation framework targeting CVE-2026-63030 and CVE-2026-60137 — two...

CVE-2026-44963

cve-id ⚡ استخدام بسيط استخدم هذا المشروع فقط في بيئات آمنة ومصرح بها مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات المختبرات المعزولة بيئات اختبار الاختراق المصرح بها مثال الإعداد: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv...

CVE-2026-42055

cve-id ⚡ सरल उपयोग इस प्रोजेक्ट का उपयोग केवल सुरक्षित और अधिकृत वातावरणों में करें, जैसे: स्थानीय वर्चुअल मशीनें डॉकर कंटेनर पृथक प्रयोगशाला सेटअप अधिकृत पेनिट्रेशन टेस्टिंग वातावरण उदाहरण सेटअप: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m...

CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE EXP Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

WP-Contest-Gallery-28.1.4-Exploit

⚠️ Under Testing This PoC is actively being tested and refined. Features may change between releases. CVE-2026-3180 WordPress Contest Gallery — Unauthenticated Blind SQL Injection Proof-of-concept assessment tool for CVE-2026-3180 Author: Sudeepa Wanigarathna · Original discovery: cardosource...

CVE-2026-31694-POC

CVE-2026-31694: FUSE readdir कैश आउट-ऑफ-बाउंड राइट fs/fuse/readdir.c:fuseadddirenttocache में एक गुम बाउंड्स चेक। एक FUSE सर्वर namelen = 4095 के साथ एक dirent लौटाता है, जो 4120-बाइट रिकॉर्ड में सीरियलाइज़ होता है। कर्नेल इसे एक एकल 4096-बाइट पेज-कैश पेज में कॉपी करता है और अगले भौतिक पेज में 24...

Zena-CVE-2021-45026

زينا - استغلال XSS مخزنة إلى RCE إثبات المفهوم إثبات المفهوم لاستغلال تطبيق زينا من Rocket Software الإصدار 4.2.1 - XSS مخزنة إلى RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html عملية إثبات المفهوم: يقوم بتسجيل الدخول إلى صفحة webconfig الخاصة بزينا...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

awspwn

AWSPwn - AWS attack-path automation Enumerate an account's IA...

CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - दूरस्थ प्रमाणीकरण बाईपास CVE-2026-24061 का शोषण करने के लिए एक सुरक्षा अनुसंधान उपकरण, जो GNU inetutils-telnetd में एक गंभीर दूरस्थ प्रमाणीकरण बाईपास भेद्यता है, जो बिना प्रमाणीकरण के तत्काल रूट शेल एक्सेस की अनुमति देता है। विषय सूची भेद्यता सारांश प्रभावित...