cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

CVE-2026-31431-CopyFail-static-ELF--POC

CVE-2026-31431: Copy Fail - 587字节静态ELF 这个漏洞不是我发现的。功劳归于 Xint Code / Theori。 这个仓库是我对如何将漏洞利用做到尽可能小的尝试——一个 手工编写的x8664 ELF，仅用587字节完成完整的本地提权。没有libc，没有 链接器，没有运行时。只有NASM和固执。 实际上，内核通过AFALG + splice将写入原语交给你， 可以写入任何可读文件的页缓存。将其指向setuid 二进制的入口点，写入shellcode，执行该二进制，获得root。 关于体积的参考：原始的公开Copy Fail文章附带了一个微型...

CVE-2025-56243

CVE-2025-56243 - PuneethReddyHC / 活动管理系统 v1.0 中的反射型 XSS 漏洞 标题： register.php 中 eventid 参数导致的反射型跨站脚本（XSS）漏洞 厂商 / 仓库： PuneethReddyHC / event-management 受影响版本： 1.0（测试时为 master 分支/标签） 报告人： Hafiz Pradana Gemilang 披露状态： 已私下通知厂商 — 为保障用户安全，暂不公开漏洞利用 PoC。 状态和时间线将在协调或补丁发布后更新。 概述 在 register.php...

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligne...

iron-proxy

iron-proxy The problem CI jobs, AI coding agents, and sandboxed containers can make arbitrary outbound requests. A compromised dependency, a prompt injection, or a malicious build step can exfiltrate secrets, phone home, or open a reverse shell. Most teams have zero visibility into what's leaving...

CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE Detection & Exploitation Tool Detection and exploitation tool for CVE-2024-21762 - Critical FortiGate SSL VPN vulnerability ⚠️ LEGAL DISCLAIMER : This tool is for authorized test environments only. Unauthorized use on systems is ILLEGAL and may result in...

Detections-CVE-2026-31431

MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-31431 "Copy Fail" — Detection & Response Package Published: 2026-04-30 CVSSv3: 7.8 High...

halo-cve-2026-67919

通过 URL 触发的 Halo 插件 RCE Halo 的控制台允许管理员通过粘贴 URL 来安装和升级插件。它会获取任意 URL，安装 jar，而 jar 中的代码会在服务器上运行。不检查 scheme、不检查主机、跟随重定向，插件管理器会直接从 jar 中加载扩展类。 这就是 cve-2026-67919（install-from-uri / upgrade-from-uri）、cve-2026-67920（迁移恢复）、cve-2026-67921（csrf/cors 链）。这三者均已在 2026 年 8 月的 docker 实验环境中针对 halohub/halo:2.25.4...

s26-m1q-ghostlock-selinux

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 root@kitploit: exploit 后通过...

CVE-2025-12758

CVE-2025-12758：Validator.js isLength 函数 Unicode 变体选择符绕过漏洞 CVE ID： CVE-2025-12758 CVSS 评分： 8.7（高危） 严重性： 高危 CWE： CWE-792（对一个或多个特殊元素实例的过滤不完整） 发布日期： 2025年11月26日 披露日期： 2025年10月19日 漏洞概述 此漏洞影响 validator npm 包版本 13.15.22。isLength 函数在计算字符串长度时未考虑 Unicode 变体选择符（\uFE0F、\uFE0E），从而导致输入验证不当。 影响 使用 isLength...

jsch

JSch-0.1.55 的分叉 参见原始 README 为什么要使用这个库？ 正如我在博客文章中所解释的，主要要点如下： OpenSSH 已在8.8 版本中默认禁用 ssh-rsa，你需要一个支持 rsa-sha2-256 和 rsa-sha2-512 的库。 直接替换：只需更改依赖坐标即可，无需其他操作。 SourceForge 上的 JSch 没有积极的维护。 与 OpenJDK 功能保持同步，因此无需额外依赖。 有文档吗？ 不多。请查看 examples 文件夹中的示例代码。还有一些 wiki 页面，例如 Jsch-Configuration 和 Jsch-Logging。 版本管...

CVE-2026-67401

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component...

CLSA-2026-1788970606 TuxCare security update for 8 packages (1 CVE)

TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 3.6.5-tuxcare.6...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

react2shell

React2Shell Go Version React2Shell is a high-performance vulnerability scanner written in Go, specifically designed to detect Server-Side Remote Code Execution RCE vulnerabilities in Next.js applications CVE-2025-55182 & CVE-2025-66478. This tool improves upon existing proof-of-concept scripts by...

apache__jspwiki_CVE-2019-10077_2_11_0_M4_fixed

Apache JSPWiki 2.11 - ドキュメント root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache...

GHSA-8CP2-47HG-MFGH Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...