RHEL 8 : gegl (RHSA-2026:62425)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:62425 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...

RockyLinux 8 : gegl04 (RLSA-2026:62420)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62420 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...

Linux Distros Unpatched Vulnerability : CVE-2026-84292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port...

Linux Distros Unpatched Vulnerability : CVE-2026-84394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but do...

nodejs:24 security update

nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...

PT-2026-85217

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

...[ More ]

This Metasploit module exploits an unauthenticated command execution vulnerability in MCPJam Inspector. The /api/mcp/connect endpoint accepts a JSON serverConfig object containing a command and argument list used to start an MCP server. A remote attacker can abuse this endpoint to execute arbitra...

Bludit CMS 3.20.0 Cross Site Scripting

Bludit CMS version 3.20.0 suffers from a cross site scripting vulnerability in the search plugin. Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Date: 2026-08-11 Exploit Author: Ranjit Kumar Singh Vendor Homepage: https://www.bludit.com/ Software Link:...

ALSA-2026:63014 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: s390/cpumsf: Handle CPU hotplug remove during sampling CVE-2024-57849 kernel: smc91x: fix broken irq-context in PREEMPTRT CVE-2025-71132 kernel: bonding: alb: fix UAF in rlbarprecv during...

AlmaLinux 8 : kernel-rt (ALSA-2026:63013)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:63013 advisory. kernel: s390/cpumsf: Handle CPU hotplug remove during sampling CVE-2024-57849 kernel: smc91x: fix broken irq-context in PREEMPTRT CVE-2025-71132 kernel:...

NSEC3-X

DISCLAIMER: This project was generated by Artificial Intelligence AI but has undergone a rigorous "Human-in-the-Loop" HITL process. This means the code has been reviewed and refactored by a human software engineer, the architectural design was human-directed, and a basic security audit was...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 認証されていないMobile MCPアクセスにより、Android画面データが露出し、ADBを介したリモートUI制御機能が提供される可能性があります。 ⚠️ セキュリティ通知 このリポジトリは、許可されたセキュリティ研究、脆弱性検証、防御的テスト、および管理された実験室環境のみを対象としています。 同梱のチェッカーは、非破壊的な認証境界チェック を実行するように設計されています。 以下のことは行いません ： 任意のMCPツールの実行 Androidデバイスの制御 実デバイスに対するADBコマンドの実行 スクリーンショットの取得...

CVE-2026-32202

PoC root@kitploit: python3 CVE-2026-32202.py -h usage: CVE-2026-32202.py -h --unc PATH --out FILE --applet-id INT --name STR --infotip STR --no-dump Generate a test LNK file with an IDCONTROLW structure. Research tool for CVE-2026-21510 / CVE-2026-32202 patch analysis. options: -h, --help show th...

CVE-2022-42889

🚀 CVE-2022-42889 Text4Shell 익스플로잇 Apache Commons Text 1.10.0 미만 버전에서 발생하는 치명적인 원격 코드 실행 취약점인 CVE-2022-42889Text4Shell을 위한 Python 익스플로잇입니다. 📋 목차 설명 취약점 세부 정보 영향을 받는 버전 익스플로잇 기능 요구 사항 사용법 예제 작동 방식 탐지 완화 참고 자료 면책 조항 📝 설명 이 익스플로잇은 StringLookup 인터폴레이터가 처리하는 특수하게 조작된 입력 문자열을 통해 원격 코드 실행RCE을 허용하는 Apache...

OpenNebula-CVE-2025-56535

OpenNebula-CVE-2025-56535 익스플로잇 제목 : OpenNebula 6.10.0.1 - 저장형 XSS 크로스사이트 스크립팅 in zone attribute 익스플로잇 작성자 : Mark Artamonov 벤더 홈페이지 : https://opennebula.io/ 테스트 버전 : OpenNebula 6.10.0.1 영향받는 버전 : OpenNebula 개념 증명 :...

CVE-2025-6792

익스플로잇: 권한 없는 Pusher 채널 구독 도청 1 Pusher 자격 증명 얻기 브라우저 콘솔에서 root@kitploit: console.log window.wpguppyscriptsvars.pusherKey, window.wpguppyscriptsvars.pusherCluster ; 2 피해자의 비공개 채널 구독 root@kitploit: Pusher Eavesdrop Test Listening on private-user-5 const log = msg = const p =...

CVE-2025-63946-Tencent-PC-Manager-EoP

CVE-2025-63946 Tencent PC Manager EoP バージョン: PCManager バージョン 17.10.28554.205 以下 概要: Tencent PC Manager の C:\Windows\Temp 以下のファイルとディレクトリが安全に処理されない脆弱性を発見しました。攻撃者はシンボリックリンク（symlink）攻撃を利用して、SYSTEM 権限のプロセスに任意のファイルを削除させ、ローカル権限昇格を引き起こすことができます。スキャン処理中、NT AUTHORITY\SYSTEM で実行されている QQPCRtp.exe...

CVE-2026-39047

PrintHack - プリンタセキュリティテストツール root@kitploit: | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ 免責事項 : このツールは正当なセキュリティテスト および教育目的のみ を意図しています。所有しているシステム、または明示的なテスト許可を得たシステムでのみ責任を持って使用してください。 🎯 機能 コア機能 🔌 生ソケット印刷 - ポート9100を介したプリンタとの直接通信 📄 PCLペイロード配信 - Printer Command Languageペイロードの送信 🖼️...

OpenNebula-CVE-2025-56537

OpenNebula-CVE-2025-56537 Exploit 제목 : OpenNebula 6.10.0.1 - 가상 네트워크 템플릿의 저장형 XSS 교차 사이트 스크립팅 Exploit 작성자 : Mark Artamonov 공급업체 홈페이지 : https://opennebula.io/ 테스트 버전 : OpenNebula 6.10.0.1 영향받는 버전 : OpenNebula 개념 증명 :...

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...