14124 matches found
krustyloader-analysis
KrustyLoader-Analyse Dieses Repository enthält Ressourcen im Zusammenhang mit der Analyse von KrustyLoader, die in diesem Blogbeitrag verfügbar ist: https://www.synacktiv.com/publications/krustyloader-rust-malware-linked-to-ivanti-connectsecure-compromises. ein Python-Skript zum Extrahieren und...
CVE-2026-23744-PoC
CVE-2026-23744-PoC Exploit RCE MCP Linux PoC per sfruttare /api/mcp/connect per l'esecuzione remota di comandi. Requisiti root@kitploit: pip install requests Utilizzo root@kitploit: python3 exploit.py Esempio: root@kitploit: python3 exploit.py mcp.something.com Configurazione modifica nello scrip...
CVE-2026-23744
CVE-2026-23744 — MCP Connect RCE tramite Iniezione di Comandi Non Autenticata ⚠️ Disclaimer: Questo repository è solo a scopo educativo e di ricerca sulla sicurezza. L'uso di questo exploit contro sistemi senza autorizzazione esplicita è illegale. L'autore non si assume alcuna responsabilità per...
CVE-2026-70665
Doorkeeper OpenID Connect implements an OpenID Connect authentication...
CVE-2025-11986
1 Extrair o nonce público cryptoajax da página restrita root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' NONCE=$curl -s "http://localhost/wordpress/" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if /cryptoconnectChainAjax\s=\s^"nonce"\s:\s"^"+"/s'...
CVE-2025-61479
An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...
PoC-CVE-2026-23744
PoC-CVE-2026-23744 Esecuzione di codice remoto su MCPJam Inspector Riferimento https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...
CVE-2026-63687
A flaw was found in Apache CXF. This vulnerability allows an attacker, who has compromised a client's secret, to bypass critical security protections in the authorization process. By injecting malicious values for parameters like codechallenge and nonce, the attacker can undermine the integrity o...
CVE-2026-77551
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...
CVE-2026-77551
An Improper Access Control vulnerability in UniFi Connect Display Cast Pro allows a network-based attacker, under certain conditions, to escalate privileges on the device. The flaw is scored CVSS 9.0 (CRITICAL) with a changed scope and high impact on confidentiality, integrity, and availability. ...
CVE-2026-77538
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...
CVE-2026-77538
An Improper Access Control vulnerability in the UniFi Connect Application (Ubiquiti) allows a network-based attacker with no prior privileges to escalate privileges within the application. The CVSS 3.1 score is 8.2 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L, indicating a low-comp...
CVE-2026-77538
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...
CVE-2025-61479
Vanderbilt Industries Acre Security SPC5300.000 Main Board version 3.14.1 is affected by a denial-of-service vulnerability. The root cause is that SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session, allowing a physically proximate attacker to ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098945)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098945 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect if already established During connect, acting on a...
EUVD-2025-210803
An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098895)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098895 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sendmsg/sendto with MSGFASTOPEN i...
Linux Distros Unpatched Vulnerability : CVE-2026-70665
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client...
DEBIAN-CVE-2026-70665
Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certai...
CVE-2026-70665
Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certai...