Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246：Apache RocketMQ 远程代码执行 概述 Apache RocketMQ 是最流行且广泛使用的分布式消息和流处理平台之一。 最近报道了 Apache RocketMQ 中存在一个命令执行漏洞，影响版本 5.1.0 及以下。远程未认证用户可以通过使用更新配置功能来利用此漏洞，以与 RocketMQ 用户进程相同的访问级别执行命令。 核心组件 命名服务器： 1. RocketMQ 中的命名服务器充当整个消息基础设施的注册表或元数据存储。 2. 它维护有关主题、队列以及负责处理消息的代理的信息。 3...

CVE-2020-11932

CVE-2020-11932 🐛🔍 检查 CVE-2020-11932 并测试与此漏洞相关的主机 使用方法 下载 root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh 使用 curl（无需下载） root@kitploit: bash curl -s...

cve-2015-4843-type-confusion-phrack

Descripción Los detalles de la vulnerabilidad se discuten en confluence. Este repositorio ha sido retomado después de unos años de estar inactivo, sin haber revisado el código DisabledSecurityManager. TypeConfusionDemo OverflowDemo Esta es una demo que muestra que podemos desbordar hacia antes de...

CVE-2021-42013

CVE-2021-42013 易受攻击的服务 安装 有几种选择： 1. Docker 容器 root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t...

CVE-2021-41773

CVE-2021-41773 易受攻击的服务 安装 几种方式： 1. Docker 容器 root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd CVE-2021-41773-Vulnerable-service/2.4.49 docker build -t...

CVE-2019-9810

CVE-2019-9810 Windows 版 Firefox 利用程序 CVE-2019-9810 是一个由 Richard Zhu 和 Amat Cama 在 Pwn2Own 2019 上发现并利用的漏洞。它影响了 Mozilla 的 JavaScript 引擎 Spidermonkey，并被用于实现渲染进程的攻破。 该问题已于大约两个月前在 mfsa2019-09 中修复。 问题概述 简而言之，该漏洞使得边界检查判定为冗余并被优化掉，从而允许代码访问越界内存。问题本身出在 Ion 管道的别名分析阶段。下图展示了 GVN...

CVE-2019-11708

CVE-2019-11708 和 CVE-2019-9810 的完整链式利用 这是一个针对 Windows 64 位 Firefox 的完整浏览器妥协利用链（CVE-2019-11708 和 CVE-2019-9810）。它利用 CVE-2019-9810 在内容进程和父进程中获取代码执行权限，并利用 CVE-2019-11708 诱骗父进程浏览到任意 URL。 我曾在一篇题为 A journey into IonMonkey: root-causing CVE-2019-9810 的文章以及相关的 github 仓库 中详细介绍了 CVE-2019-9810 的根因和利用方法。...

Cordon

Cordon ⚠️ 项目已弃用 该项目的开发已停止 ，因为其他人也在做同样的想法，并且构建了更好的解决方案。 我们强烈推荐查看：Fence by Use-Tusk。 注意：此仓库最初是为FOSS HACK 2026 创建的，但我们不幸未能及时完成。 然而，我们为 Hackathena '26 构建了一个类似的项目，并获得了 三等奖！ 如果您有兴趣，可以在此处找到该仓库：A56-A5/lion。 Cordon 在 Linux 上受限制的文件系统视图中运行任何命令。它使用 Linux 命名空间（通过 bubblewrap）隐藏你的进程不需要的一切——你的主目录、SSH 密钥、AWS...

CVE-2017-5618-Screen-4.5.0-Root

Exploit de escalada de privilegios local para GNU Screen 4.5.0 CVE-2017-5618 📌 Resumen Exploit de escalada de privilegios local para GNU Screen 4.5.0 que secuestra la carga de bibliotecas compartidas para obtener acceso root mediante la manipulación de ld.so.preload. 🔧 Detalles técnicos...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway 在2022年第一季度，发现了一个有趣且严重（基础评分10.0）的Spring Cloud Gateway代码注入漏洞，利用Actuator API执行SpEL注入，可能导致系统被攻破。 受影响版本：Spring Cloud Gateway 3.1.1+ 和 3.0.7+ 之前的版本。 在Spring Cloud Gateway中，应用程序容易受到代码注入攻击，如果满足以下条件：Gateway Actuator端点已启用、暴露且未加防护。 漏洞流程图 PCAP分析...

PT-2026-90138

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc get and of icc get by index In of icc get by index and icc get, if the dynamic allocation for path-name fails via kasprintf, the error handling path directly calls kfreepath to free the pat...

PT-2026-90462

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as named data. Both are added to tr-hist vars by save hist...

PT-2026-90319

In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a thread is stopped in syscall trace enter for ptrace, another thread can install a seccomp filter with SECCOMP FILTER FLAG TSYN...

AlmaLinux 9 : coreutils (ALSA-2026:66403)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly fro...

Linux Distros Unpatched Vulnerability : CVE-2026-89259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS included in the default...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107290 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels Some lwtunnels have a dst cache for...

Fedora 43 : curl (2026-6841033933)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6841033933 advisory. - fix HTTP/2 stream-dependency tree UAF CVE-2026-10536 - fix stale proxy password leak CVE-2026-9079 - fix wrong reuse for different services...

Linux Distros Unpatched Vulnerability : CVE-2026-88914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an...

Linux Distros Unpatched Vulnerability : CVE-2026-79591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled fon...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107265)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107265 advisory. In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore read-only array in mdcheckrecovery Usually if the array is not read-write,...