Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107266 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107275 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107305)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107305 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when...

Linux Distros Unpatched Vulnerability : CVE-2026-87776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still...

EcoStruxure IT Data Center Expert < 9.1.2 Multiple Vulnerabilities (SEVD-2026-251-01)

The version of EcoStruxure IT Data Center Expert installed on the remote host is prior to 9.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SEVD-2026-251-01 advisory. - CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized...

RockyLinux 8 : kernel-rt (RLSA-2026:66324)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66324 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: scsi: target:...

Fedora 45 : nsd (2026-c56ac69334)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c56ac69334 advisory. BUG FIXES: Fix for CVE-2026-18664: IP range access control restrictions are bypassed for some unintended IP. Thanks to Qifan Zhang, Palo Alto Networ...

Linux Distros Unpatched Vulnerability : CVE-2026-57225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to flawed recursion tracking during the disassembly of heavily nested ASN.1 structures used in cryptographic handshakes. By floodin...

Fedora 45 : bind (2026-0adbf9c133)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0adbf9c133 advisory. Fixes multiple CVEs, without a rebase to newer version - Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 - Key Record using PRIVATEDNS...

Linux Distros Unpatched Vulnerability : CVE-2026-88045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.0 until 1.75.1, the serve S3 streamed...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107304 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sastask Currently a use-after-free may occur...

Linux Distros Unpatched Vulnerability : CVE-2026-57227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to uncontrolled resource consumption within the DNS parser logic. The system struggles to process anomalous, looping compressed...

Linux Distros Unpatched Vulnerability : CVE-2026-45761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a...

Debian dsa-6494 : kamailio - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6494 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6494-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-88051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independe...

Oracle Linux 8 : ELSA-2026-66451-0: / glib2 (ELSA-2026-664510)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664510 advisory. 2.56.4-178 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing Tenable has extracted the preceding description block directly from the Oracle...

CVE-2025-55182

CVE-2025-55182 如果你在寻找真正的解释，msanft/CVE-2025-55182 有一个不错的解释（附带可用的PoC）。 这个仓库只包含我尝试的一些东西，产生了一些有趣的（？）结果。 ./thing.py 现在包含一个可用的PoC，大部分取自 https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3。 旧资料 模板： root@kitploit: !/usr/bin/env python3 import httpx c =...

CVE-2024-4577

CVE-2024-4577 PHP CGI 远程代码执行漏洞利用工具 作者： Byte Reaper CVE： CVE-2024-4577 类别： Web 漏洞利用 目标版本： PHP CGI 8.1, 8.2, 8.3 目标操作系统： Windows 许可证： MIT 概述 本仓库提供了针对运行在 Windows 系统上的 PHP CGI 8.1、8.2 和 8.3 版本中 CVE-2024-4577 漏洞的概念验证利用代码。该漏洞通过利用不安全的 PHP CGI 配置实现远程代码执行（RCE）。 功能特性 通过精心构造的 HTTP POST 请求实现远程代码执行...

CVE-2025-5964-

CVE‑2025‑5964 M‑Files 路径遍历 PoC 作者: Byte Reaper Telegram: @ByteReaper0 概述 本仓库包含一个用 C 语言编写的 概念验证 PoC ，针对 M‑Files 版本 25.6.14925.0 中疑似存在的 路径遍历 漏洞。 该 PoC（文件 exploit.c）尝试通过向 REST API 端点注入遍历载荷来读取敏感文件（例如 /etc/passwd）。 重要声明 未经确认的漏洞利用 : 所有参数和端点均来自公开文档和 OSINT。 我 没有 权限 访问 M‑Files 的授权或演示实例来进行实际验证。 负责任地使用 : 不要...

CVE-2025-7769

CVE-2025-7769 – mobileapi 中的远程命令注入 描述： 本仓库包含针对 CVE-2025-7769 的概念验证（PoC）利用代码，该漏洞是 Tigo Energy CCA 设备在暴露 /cgi-bin/mobileapi 端点时存在的一个严重远程命令注入 漏洞。 该漏洞通过在 cmd JSON 键中注入操作系统命令触发，未经过滤的输入直接拼接到系统调用中，从而允许在设备上实现完全远程代码执行（RCE）。 参考： NVD 条目：https://nvd.nist.gov/vuln/detail/CVE-2025-7769 使用方法： root@kitploit: gcc...