CVE-2022-24706

CVE-2022-24706 贡献者 白帽学校第4期39班 金正贤@junghyeonkum CouchDB Erlang分布式远程命令执行漏洞 CVE-2022-24706 摘要 Apache CouchDB 是一个用 Erlang 实现的开源面向文档的 NoSQL 数据库。 由于 Apache CouchDB 是用 Erlang 开发的，它默认支持分布式计算（集群）功能。集群节点之间通过 Erlang/OTP Distribution Protocol 进行通信，通过该协议，可以以运行 CouchDB 的用户权限执行操作系统（OS）命令。 要执行操作系统命令，需要知道 Erlang...

CVE-2026-15409

🚀 CVE-2026-15409 – RCE en Erlang en SonicWall SMA 1000 a través del proxy WebSocket Exploit de prueba de concepto para CVE-2026-15409 – ejecución remota de código no autenticada en los dispositivos de la serie SonicWall SMA 1000 a través del protocolo de distribución de Erlang tunelizado sobre...

sccm-http-looter

SCCM HTTP Looter Cómo funciona Los puntos de distribución DP de SCCM son los servidores que Microsoft SCCM utiliza para alojar todos los archivos usados en instalaciones de software, parches, implementaciones de scripts, etc. Por defecto, estos servidores permiten el acceso mediante SMB TCP/445 y...

ROOT-OS-DEBIAN-12-CVE-2026-5119 CVE-2026-5119 in libsoup2.4 - Patched by Root

Root has patched CVE-2026-5119 in the libsoup2.4 package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Semilla débil en la corrección de errores de distribución de claves cuánticas Código del programa Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from...

CVE-2026-31431_Kernel_Checker

Para servidores con Internet libre: root@kitploit: curl -fsSL https://raw.githubusercontent.com/ShahaB108/CVE-2026-31431KernelChecker/main/kernelcheck.sh | bash Para servidores en Irán: root@kitploit: curl -fsSL...

vex-repo-spec

Especificación del Repositorio VEX v0.1 Especificación del Repositorio VEX v0.1 1. Versionado 2. Manifiesto del Repositorio 2.1 Descripción General 2.2 Ubicación del Archivo 2.3 Esquema 2.4 Ejemplo 2.5 Descripciones de Campos y Notas de Uso Campos Principales Subcampos de versions Subcampos de...

xz

xz — 便携二进制发行版 打包自 xz-utils 5.8.3 （已修复 CVE-2024-3094 后门漏洞）—— 为 x-cmd 包生态提供的便携二进制发行版。 安装 root@kitploit: macOS / Linux（有 x 命令）： x eget x-cmd-build/xz --to /usr/local/bin/xz 手动： 1. 打开 https://github.com/x-cmd-build/xz/releases 2. 下载匹配你平台的 asset 3. 解压，把 xz（或 xz.exe）放到 PATH 资产命名 文件| 平台 ---|---...

ROOT-OS-DEBIAN-12-CVE-2024-56742 CVE-2024-56742 in linux - Patched by Root

Root has patched CVE-2024-56742 in the linux package for Root:Debian:12. Multiple fixed versions available...

ipv6_frag_escape

IPV6FRAGESCAPE — Linux IPv6 fragmentation container escape tracking site Source for the IPV6FRAGESCAPE patch-status tracker: a single-page site recording which distributions have shipped a fix for the IPv6 fragmentation container escape in the Linux kernel. Where the facts live Everything about t...

CVE-2026-84001

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...

CVE-2026-69712

Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...

EUVD-2026-73363

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...

CVE-2026-84001

An out-of-bounds read vulnerability in Windows Key Distribution Center allows an unauthorized, remote attacker to cause a denial of service over the network. The flaw requires no privileges, no user interaction, and has low attack complexity, yielding a CVSS 3.1 score of 7.5 (HIGH) with high avai...

CVE-2026-69712

CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...

EUVD-2026-73070

Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

Windows Key Distribution Center Denial of Service Vulnerability

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...

Windows Key Distribution Center Remote Code Execution Vulnerability

Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...

CVE-2026-9256

CVE-2026-9256 — nginx rewrite-module 堆溢出跟踪站点 CVE-2026-9256 补丁状态跟踪器的源码：一个单页站点，记录哪些发行版已为 nginx rewrite-module 堆溢出发布了修复。 事实所在之处 关于该漏洞的所有信息——受影响版本与已修复版本、上游修复、发现与披露致谢，以及最终各发行版补丁状态——均属于跟踪器页面，而非本 README： 渲染页面： https://kimmo.cloud/CVE-2026-9256/ 源码： site/content/index.md 编辑该文件即可；本仓库中的其他内容均为构建基础设施。...