SUSE SLED15 / SLES15 Security Update : libusb-1_0 (SUSE-SU-2026:4050-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4050-1 advisory. This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allow...

Debian dsa-6508 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6508 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6508-1 [email protected] https://www.debian.org/securit...

TencentOS Server 2: bind (TSSA-2026:1039)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1039 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

RHEL 9 : libsoup (RHSA-2026:69108)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69108 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup:...

CVE-2026-88412

CVE-2026-88412 is an integer overflow vulnerability in the _BulkInsert_ReadProperty function (file bulk_insert.c) of FalkorDB (a Redis module), version 4.20.1 . A remote attacker can supply a crafted input to trigger the overflow, resulting in a Denial of Service . The CVSS 3.1 score is 5.3 (Medi...

Security update for sofia-sip (important)

openSUSE Security Update: Security update for sofia-sip Announcement ID: openSUSE-SU-2026:0330-1 Rating: important References: 1200116 1200117 1200118 Cross-References: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three...

SUSE SLES15 Security Update : amazon-cloudwatch-agent (SUSE-SU-2026:4045-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4045-1 advisory. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through...

RHEL 10 : libkcapi (RHSA-2026:69285)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69285 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

RockyLinux 9 : perl-Net-DNS (RLSA-2026:68786)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:68786 advisory. perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records CVE-2026-81928 Tenable has extracted the preceding description bloc...

Linux Distros Unpatched Vulnerability : CVE-2026-93563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's SmtpResponseDecoder component. A remote attacker, acting as a malicious or man-in-the-middle MITM SMTP server, could exploit this by...

Linux Distros Unpatched Vulnerability : CVE-2026-93687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace...

CVE-2026-94094

A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host Route. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC： root@kitploit: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 またはスクリプトを使用 root@kitploit: python checkicmpdos.py 127.0.0.1...

CVE-2020-0796

CVE-2020-0796 静的パケットを使用するため、CVE-2020-0796 向けのさらにシンプルな PoC 兼スキャナーです。パブリック IP での誤使用（やらないでください）を防ぐ保護機能と、クラッシュを誘発するオン/オフスイッチを備えています。必要なのは素の Python 3 だけです！ スキャンモード： root@kitploit: python3 poc-and-scan.py 10.0.0.15 N スキャン+クラッシュモード： root@kitploit: python3 poc-and-scan.py 10.0.0.15 Y 出力： root@kitploit: S...

[SECURITY] [DSA 6509-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2026 https://www.debian.org/security/faq -...

discord-crasher

メディアパーサーテストケースジェネレーター media-gen は、2つのメディアパーサーテストケースを構築するための、依存関係の少ない小さな Rust コマンドラインツールです。既存の有効なメディアファイルをその場で編集します。FFmpeg を呼び出したり、ブラウザにパッチを当てたり、サーバーに接続したり、何かをアップロードしたりはしません。 WebM ケースには、旧来の1バッファ遅延 Vorbis パスと現在の即時破棄パスの両方に対応するブリッジレイアウトが含まれています。チェックインされている短いサンプルは、Discord Desktop 1.0.9257 Electron...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Apache Tomcat HTTP/2 DoS 취약점CVE-2025-31650에 대한 개념 증명PoC 이 스크립트는 HTTP/2를 통해 잘못된 형식의 priority 헤더를 전송하여 Apache Tomcat에서 메모리 소진 상태를 유발합니다. 🎯 영향을 받는 버전 Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39 Apache Tomcat 11.0.0-M2 – 11.0.5 ⚙️ 기능 ✔️ HTTP/2 지원 확인 ✔️ Server 헤더 검사...

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS CalibreWeb v0.6.24 の ReDoS エクスプロイト...

Wincrash

Wincrash root@kitploit: 私は、このツールを使用して達成されることについて一切の責任を負いません。教育目的のみで使用すべきです。CVE-2019-0708 - 認証されていない攻撃者がRDPを使用してターゲットシステムに接続し、特別に細工されたリクエストを送信すると、別名「リモートデスクトップサービスのリモートコード実行の脆弱性」が発生します。このエクスプロイトはコードを実行せずにデバイスをクラッシュさせるだけです。 スクリーンショット alt text alt text インストール: root@kitploit: $ apt-get install python...

log4j2-CVE-2021-45105

Sample Log4j2 vulnerable application CVE-2021-45105 影響を受けるバージョン: 2.0-beta9 から 2.16.0 までの全バージョン このアプリケーションは、CVE-2021-45105 に対して脆弱な Spring Boot Web アプリケーションをベースとしています。 Log4j 2.16.0 を使用しています。 アプリケーションの実行 実行する: root@kitploit: Import the project in Java IDE as a maven project Run CVEMainApplication.ja...