Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-e6ca27403f)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6ca27403f advisory. Update to 1.28.6. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 43 : mingw-gstreamer1-plugins-base / mingw-gstreamer1-plugins-good (2026-bcfa11cd3b)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-bcfa11cd3b advisory. Backport multiple security fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-73276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before...

Oracle Linux 10 : ELSA-2026-61241-0: / pipewire (ELSA-2026-612410)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612410 advisory. 1.4.11-1.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-80231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-80231 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

RHEL 9 : Satellite 6.17.11 Async Update (Important) (RHSA-2026:63387)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63387 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

Linux Distros Unpatched Vulnerability : CVE-2026-71222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-53600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis- applies a buffered PAX size extension to an intermedia...

Debian dla-4769 : libass-dev - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4769 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4769-1 [email protected] https://www.debian.org/lts/security/...

AlmaLinux 8 : kernel-rt (ALSA-2026:63013)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:63013 advisory. kernel: s390/cpumsf: Handle CPU hotplug remove during sampling CVE-2024-57849 kernel: smc91x: fix broken irq-context in PREEMPTRT CVE-2025-71132 kernel:...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mn...

CVE-2025-32463

CVE-2025-32463: Sudo Privilege Escalation chroot This repository contains information and/or a proof of concept PoC about the vulnerability CVE-2025-32463 , a critical local privilege escalation flaw in the sudo utility. 📌 Description The vulnerability allows a local user to gain root access by...

CVE-2025-6018

Guía de escalada de privilegios CVE-2025-6018 + CVE-2025-6019 中文 📋 Pasos rápidos de explotación Paso 1: Preparar imagen XFS Máquina local root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xf...

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...

GHSA-2MW5-23GM-PCCQ OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Dahua Authentication Bypass Exploit Simulation PoC CVE-2021-33044 Overview Dahua IP cameras are IoT devices commonly used in security surveillance systems. Due to frequent deployment in internal networks or Internet access, security vulnerabilities in IP cameras can severely impact privacy and...

CVE-2018-6606

CVE-2018-6606 This terminates any PID. Tested on Windows 10 64-bit, Flare VM. Administrator privileges are required. Some adjustments may be needed — see resource.rc. Toolchain Download:...

CVE-2025-29927-Proof-of-Concept

Walkthrough Step 1 5 min Hint Which network services are exposed by the target? — — — Solution root@kitploit: kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p Step 2 5 min Hint 1 The landing page only reveals a login page, but web servers often expose additional paths. Hint 2 Try using a directory...

CVE-2026-31431_SCA_WAZUH

Wazuh SCA 策略：复制失败（CVE-2026-31431） 此策略文件： copy-fail-cve-2026-31431-policy.yml 旨在检测对 复制失败 / CVE-2026-31431 的可能暴露和缓解状态。 此策略检查的内容 1. algifaead 通过 modprobe 策略被禁用。 2. algifaead 当前未加载。 3. 缓解文件存在（/etc/modprobe.d/disable-algif.conf）。 4. 内核更新后重启的启发式检查通过。 5. 尽力而为的 seccomp 控制包含 AFALG（容器主机）。 为何以缓解措施为先 对于此...