RHEL 8 : tesseract (RHSA-2026:67832)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67832 advisory. A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was...

Linux Distros Unpatched Vulnerability : CVE-2026-75029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all t...

Debian dsa-6503 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6503 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6503-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-89935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: apds9306: fix PM reference leak in apds9306readdata apds9306readdata calls pmruntimeresumeandget but several error paths return directly without...

AlmaLinux 9 : nginx:1.26 (ALSA-2026:67283)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67283 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...

MiracleLinux 8 : nginx:1.24 nginx-1.24.0-3.module+el8+2045+adfc96b2.5.ML.1 (AXSA:2026-1852:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1852:01 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-89847

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Avoid double completion in async IOCB timeout qla2x00asynciocbtimeout tries to abort a timed-out async IOCB. When qla24xxasyncabortcmd fails, bo...

SUSE SLES15 Security Update : kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4168-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4168-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4170-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4170-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: -...

RHEL 9 : corosync (RHSA-2026:67878)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67878 advisory. The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software. Security Fixes: corosync:...

Oracle Coherence CVE-2026-83411 (September 2026 CSPU)

The 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of Coherence installed on the remote host are affected by a vulnerability as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are...

SUSE SLES15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4146-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4146-1 advisory. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing...

ALSA-2026:67886 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input...

Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh 此脚本检查 CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434。低于 2013.59 版本的 Dropbear SSH Server 在登录失败时，会根据用户账户是否存在生成不同时间延迟的错误信息，这使得远程攻击者能够发现有效用户名。...

cve-2024-52005-poc

CVE-2024-52005：Git 中的 ANSI 转义序列注入 概述 本仓库包含一个概念验证（PoC），用于演示 CVE-2024-52005——Git 中的一个漏洞，该漏洞允许在 Git 操作期间通过 sideband 通道注入 ANSI 转义序列。 CVE-2024-52005 是一个高危 （CVSS 7.5）漏洞，影响 2.48.1、2.47.3、2.46.5、2.45.4 和 2.44.3 之前的 Git 版本。 问题 创建此 PoC 是为了证明某些加固的容器镜像在其 VEX（漏洞可利用性交换，Vulnerability Exploitability...

CVE-2019-2215

CVE-2019-2215 Android 内核漏洞 CVE-2019-2215 临时 root PoC。 它适用于运行2019年9月QP1A.190711.020镜像且内核版本-BuildID为4.4.177-g83bee1dc48e8的Google Pixel 2/Pixel 2 XL walleye/taimen设备。 用法 目前，二进制仅支持arm64。 root@kitploit: $ git clone https://github.com/jsirichai/CVE-2019-2215.git $ cd CVE-2019-2215 $ adb push...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. 复现环境 注意：环境需要支持 KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 root@kitploit: $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git checkout...

CVE-2024-24919-POC

CVE-2024-24919-POC 一个自动化CVE-2024-24919 敏感信息泄露 的简单工具 功能特点 易于使用 有帮助的注释；可测试多个域名 使用方法 root@kitploit: git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ root@kitploit: cd CVE-2024-24919-POC; chmod +x CVE-2024–24919.sh root@kitploit: ./CVE-2024–24919.sh -h 用于发现漏洞域名的Shodan Dorks 服务器："Check...

CVE-2025-57389

CVE-2025-57389 - OpenWRT 18.06.2 中的反射型 XSS 描述 在已停止维护（EOL）的 Luci OpenWRT v18.06.2 的 /cgi-bin/luci/admin/system/packages 端点上发现了一个反射型跨站脚本（XSS）漏洞。 概念验证 1. 在将流量代理到 Burp 的同时，导航至 http://192.168.56.2/cgi-bin/luci/admin/system/packages， 2. 在 Filter （过滤器）中输入任意软件包名称并提交， 3. 将发送到该端点的 POST 请求转发到 Repeater， 4. 在...

android-CVE-2016-5195

CVE-2016-5195 CVE-2016-5195（dirty cow/dirtycow/dirtyc0w）针对 Android 的概念验证 此仓库演示了通过 ADB 连接的存在漏洞的 Android 设备上的该漏洞。 它不会禁用 SELinux（参见 https://github.com/timwr/CVE-2016-5195/issues/9），也不会在设备上安装超级用户。 root@kitploit: $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPPLATFORM=android-16...