New API < v0.12.10 - Stripe Webhook Bypass

New API v0.12.10 contains a broken authentication caused by unauthenticated attacker forging Stripe webhook events, letting attackers credit arbitrary quota without payment, exploit requires no authentication. id: CVE-2026-41432 info: name: New API v0.12.10 - Stripe Webhook Bypass author: str4k3r...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

Adamantium-Thief

🔓 Adamantium-Thief Chromium 기반 브라우저에서 비밀번호, 신용카드, 기록, 쿠키, 북마크, 자동 완성 데이터를 탈취합니다. Chrome 80 버전을 지원합니다! Firefox 비밀번호 복호화기가 필요하신가요? 🌿 예시: 🔑 브라우저에서 비밀번호 가져오기: root@kitploit: Stealer.exe PASSWORDS 💳 브라우저에서 신용카드 가져오기: root@kitploit: Stealer.exe CREDITCARDS 🕘 브라우저에서 기록 가져오기: root@kitploit: Stealer.exe...

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – Bypass del Credit-Control del protocollo Diameter in 5G Codice del programma simulatore Diameter in Python root@kitploit: diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS...

memscan

memscan किसी प्रक्रिया के मेमोरी स्पेस में स्ट्रिंग, regex, चुंबकीय पट्टी कार्ड ट्रैक के क्रेडिट कार्ड नंबर खोजता है मेमोरी/प्रोसेस स्कैनर Matt Lewis, NCC Group 2014 द्वारा लिखित Tom Watson, NCC Group 2015 द्वारा अद्यतन बहुत सारे बेहतरीन विचारों के लिए Jesse Bullock का धन्यवाद NCC Group Plc द्वार...

CVE-2026-59320

When a container-level ErrorHandler is configured the mitigation for finding 221000, each delivery whose processing throws still permanently consumes one link credit. After initialCredits default 100 failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the...

EUVD-2026-67201

When a container-level ErrorHandler is configured the mitigation for finding 221000, each delivery whose processing throws still permanently consumes one link credit. After initialCredits default 100 failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the...

CVE-2026-59320 In Spring AMQP the link credit never replenished on listener exception path

When a container-level ErrorHandler is configured the mitigation for finding 221000, each delivery whose processing throws still permanently consumes one link credit. After initialCredits default 100 failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the...

CVE-2026-59320

CVE-2026-59320 affects Spring AMQP 4.1.0 . When a container-level ErrorHandler is configured, each delivery whose message processing throws an exception permanently consumes one link credit without replenishing it. After the receiver exhausts its initialCredits (default 100 ), the broker stops de...

CVE-2025-51867

CVE-2025-51867 Beschreibung der Schwachstelle Deepfiction AI ist ein KI-Unterhaltungsunternehmen mit der Mission, personalisiertes Geschichtenerzählen zu revolutionieren. Deepfiction AI stellt eine Webanwendung bereit, um Geschichten durch Chatten mit einem LLM zu erstellen. Diese ist in ihrer...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098841 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098817 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: split transactions in dio completion to avoid credit exhaustion During ocfs2 dio operation...

CVE-2026-71507 Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account write routes that allows authenticated attackers with third-party creation rights to create, replace, or delete bank account details of any company without requiring read access ...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfq: Fix for integer overflow of “credit”. If schfq is configured with “initial quantum” values greater than INTMAX, the first assignment of “credit” will cause signed integer overflow, resulting in a very negative...

CVE-2026-74638

A flaw was found in the Linux kernel's drm/v3d driver. This vulnerability arises from concurrent handling of scheduler timeout events across different hardware queues, which share a single global reset mechanism. When a reset occurs in one queue while another is processing a timeout, the...

CVE-2026-59320

CVE-2026-59320...

CVE-2026-74638

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

EUVD-2026-64575

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...