Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

strafer

Strafer Elasticsearch संक्रमण तेजी से बढ़ रहे हैं। प्रतिद्वंद्वी खुले और उजागर Elasticsearch इंटरफेस का लाभ उठाकर क्लाउड और गैर-क्लाउड परिनियोजन में संक्रमण शुरू कर रहे हैं। इस वार्ता के दौरान, हम Elasticsearch इंस्टेंस में संभावित संक्रमणों का पता लगाने के लिए "STRAFER" नामक एक टूल जारी करेंगे। ...

melee

MELEE: MySQL इंस्टेंसेस में रैनसमवेयर संक्रमण का पता लगाने के लिए एक उपकरण हमलावर इंटरनेट पर दुर्भावनापूर्ण कार्रवाई करने के लिए MySQL इंस्टेंसेस का दुरुपयोग कर रहे हैं। साइबर अपराधी उजागर MySQL इंस्टेंसेस को निशाना बना रहे हैं और डेटा चुराने, डेटा नष्ट करने और फिरौती के माध्यम से पैसे ऐंठने के ल...

CVE-2025-14847

📝 MongoDB स्कैनर – रन नोट्स स्क्रिप्ट नाम mongoexposurescanner.py 1. आवश्यक शर्तें Python 3.9+ लक्ष्य होस्ट्स तक नेटवर्क एक्सेस स्कैनिंग के लिए स्वीकृत दायरा Python सत्यापित करें: root@kitploit: python3 --version 2. उपयोग की गई फ़ाइलें फ़ाइल| उद्देश्य ---|--- mongoscanner.py| स्कैनर स्क्रिप्ट...

ollama-silent-patches

OLLAMA SILENT PATCH DISCLOSURE — PUBLIC RELEASE v2 Responsi...

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

Threat actors are exploiting a maximum-severity security flaw in Flowise , an open-source artificial intelligence AI platform, according to new findings from VulnCheck. The vulnerability in question is CVE-2025-59528 CVSS score: 10.0, a code injection vulnerability that could result in remote cod...

Exploit for Improper Input Validation in N8N

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenti...

PT-2025-43268

Name of the Vulnerable Software and Affected Versions NeuVector versions prior to 5.4.7 Description A critical issue exists in NeuVector where the enforcer component improperly handles environment variables CLUSTER RPC PORT and CLUSTER LAN PORT. These variables are used to construct shell command...

PT-2024-7225 · Pfsense · Pfsense

Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...

PT-2024-4657

Name of the Vulnerable Software and Affected Versions Ollama versions prior to 0.1.34 Description Ollama has a flaw due to insufficient input validation, leading to a path traversal issue. This allows an attacker to overwrite arbitrary files on the server, potentially leading to remote code...

Update now! MOVEit Transfer vulnerability actively exploited

On May 31, 2023, Progress Software released a security bulletin about a critical vulnerability in MOVEit Transfer. The security bulletin states: "a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized...

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 CVSS score: 7.5, the issue impacts ZK Framework versions...