certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the...

CVE-2021-41773

ApacheRCE ApacheRCEは、Apacheバージョン2.4.49～2.4.50を入力し、テキストファイルからIPアドレスのリストを読み込んで、その脆弱性を大量に実行できる小さなPythonスクリプトです。これは、複数のウェブサイトを運用していて、それらすべてが悪用可能かどうかを確認したい場合に便利です。 免責事項:...

CVE-2024-21338

CVE-2024-21338 HVCI が有効な Windows 10 および Windows 11 オペレーティングシステムにおいて、管理者からカーネルへのローカル特権昇格を可能にする脆弱性。 コンパイル Microsoft Visual Studio と C++ パッケージを使用して、Release モードと Debug モードの両方で PoC を正常にコンパイルしてください。 投稿 元のブログ記事:...

CVE-2018-6789

CVE-2018-6789 環境構築 依存関係をインストールする root@kitploit: apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev 旧バージョンのeximをダウンロードする root@kitploit: wget ftp://mirror.easyname.at/exim-ftp/exim/exim4/old/exim-4.89.tar.gz tar -xvzf ./exim-4.89.tar.gz cd...

CVE-2017-7529-POC

CVE-2017-7529-POC 脆弱性の影響 この脆弱性は、0.5.6から1.13.2までのデフォルト設定モジュールを使用するNginxのすべてのバージョンに影響します。キャッシュが有効になっている場合、攻撃者は悪意のあるリクエストを送信してリモート攻撃を行い、情報漏洩を引き起こす可能性があります。Nginxサーバーがプロキシキャッシュを使用している場合、攻撃者はこの脆弱性を悪用してサーバーのバックエンドの実際のIPやその他の機密情報を入手できます。...

dvwassl

SSL이 활성화된 Damn Vulnerable Web App SSL이 활성화된 Damn Vulnerable Web App을 실행합니다. 이유는? SSL을 통해 웹 공격 탐지를 테스트하고 싶을 수 있습니다. 이미지 빌드 root@kitploit: docker build -t dvwassl:latest . 컨테이너 실행 root@kitploit: docker run -d -p 443:443 dvwassl:latest 사용자 정의 SSL 인증서 및 키 이미지에는 미리 생성된 SSL 인증서와 키가 포함되어 있습니다. 직접 소유한 것을...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Halo CMS CORS設定ミス + CSRF保護バイパス複合攻撃 概要 Halo CMS バージョン2.25.4以前には、2つのセキュリティ設定ミスにより深刻な複合攻撃の脆弱性が存在します: 1. CORS設定ミス : CORSポリシーが任意のオリジンをcredentials: trueとともに許可している 2. CSRF保護バイパス : すべてのAPIエンドポイント/api/、/apis/がCSRF保護から除外されている...

EUVD-2026-85003

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...

UBUNTU-CVE-2026-94572

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled lo...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773のPoC - CGIが有効なApache 2.4.49 使用方法 : root@kitploit: chmod -x CVE-2021-41773.sh ./CVE-2021-41773.sh http://ip:port/ /etc/passwd 参照 https://nvd.nist.gov/vuln/detail/CVE-2021-41773 https://vulners.com/cve/CVE-2021-41773...

DEBIAN-CVE-2026-93152

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...

CVE-2026-93152 nvme-apple: Use acquire/release for queue enabled state

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...

CVE-2026-93152

CVE-2026-93152 is a memory ordering bug in the Linux kernel's nvme-apple driver. The function apple_nvme_init_queue() initializes queue state and then marks the queue as enabled using WRITE_ONCE(enabled, true) followed by wmb(). However, a wmb() does not guarantee that the earlier initialization ...

AZL-101481 CVE-2026-89936 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332setvalue enables the Vcc regulator on every write of a non-zero value and disables it on every write of zero, without tracking the channel's current state. Because t...

EUVD-2026-80536

In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332setvalue enables the Vcc regulator on every write of a non-zero value and disables it on every write of zero, without tracking the channel's current state. Because t...

CVE-2026-89936: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332setvalue enables the Vcc regulator on every write of a non-zero value and disables it on every write of zero, without tracking the channel's current state. Because t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvme: Fixed a multipath crash caused by the flush request when blktrace is enabled. The flush request initialized by blkkickflush has a NULL bio. This issue may be addressed during the nvmeendreq operation during io completion...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvme-tcp: fixed UAF Use-after-Free issues when detecting digest errors. We should also exit the iowork loop when setting rdenabled to true, so that we do not attempt to read data from the socket when the TCP stream is already...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9khtc: Abort software beacon handling if disabled. A malicious USB device can send an WMISWBAEVENTID event from an ath9khtc-managed device before beaconing is enabled. This causes a device-by-zero error in the driver,...