Lucene search
+L

600848 matches found

Github Security Blog
Github Security Blog
added 2026/09/16 4:19 p.m.7 views

node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

SUMMARY ------- A combination of bugs in node-opcua causes unlimited TCP socket accumulation FIN-WAIT-2 state during automatic reconnection, leading to memory exhaustion and eventual container/process crash OOM kill. The issue is triggered by the default configuration keepSessionAlive: true when...

7CVSS
SaveExploits0References8Affected Software3
OSV
OSV
added 2026/09/16 4:19 p.m.5 views

GHSA-R2PF-9CW4-5J65 node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

SUMMARY ------- A combination of bugs in node-opcua causes unlimited TCP socket accumulation FIN-WAIT-2 state during automatic reconnection, leading to memory exhaustion and eventual container/process crash OOM kill. The issue is triggered by the default configuration keepSessionAlive: true when...

7CVSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/16 4:17 p.m.4 views

Important: Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7CVSS0.01821EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 4:17 p.m.8 views

androrat

'm in progress internationalization, Welcome to join. Androrat Fork/Silent Edition Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client-side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 4:16 p.m.7 views

CVE-2019-0708-POC

CVE-2019-0708-POC cve-2019-0708 poc . Run Test Work well for winxp sp3. Need test for win 7. Runtime: win10 x64 python3 root@kitploit: PS D:\workspace\python\sqlstruct\sqlstruct\sqlstruct python3 .\poc.py -t 192.168.1.112 -p 3389 CVE-2019-0708 Remote Detection tool by: closethe + Connecting to RD...

10CVSS8.2AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
added 2026/09/16 4:15 p.m.7 views

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit · Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit → LPE prerequisite detection → Automated exploit execution after confirmation ⚠️ Ethical & Legal Warning This tool is intended solely for legitimate and...

7.8CVSS7.5AI score0.09334EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/16 4:11 p.m.14 views

Log4j-Vulnerability

Log4j Vulnerability Tutorial: https://youtu.be/PNDBjoT83zA Tutorial: https://cryptodeeptech.ru/log4j-vulnerability Background on Log4j Alibaba Cloud Security Team publicly disclosed a critical vulnerability CVE-2021-44228 enabling unauthenticated remote code execution against multiple versions of...

10CVSS8.7AI score0.99999EPSS
SaveExploits370References1
Kitploit
Kitploit
added 2026/09/16 4:10 p.m.8 views

Bifrost

Bifrost Command and Control What's Bifrost? Bifrost is an open-source Discord BOT that works as Command and Control C2. This C2 uses Discord API for communication between clients and server. Developed with Python, this C2 have multiples features for post-exploitation. How Bifrost works? As...

6AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/16 4:09 p.m.4 views

CVE-2026-59944 Composer: CVE-2026-59946 fix bypass via symlinked package bin path

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory segments only during dependency resolutio...

6.1CVSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/16 4:09 p.m.15 views

CVE-2026-59944 Composer: CVE-2026-59946 fix bypass via symlinked package bin path

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory segments only during dependency resolutio...

6.1CVSS
SaveExploits0References5
OSV
OSV
added 2026/09/16 4:09 p.m.2 views

CVE-2026-59944 Composer: CVE-2026-59946 fix bypass via symlinked package bin path

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory segments only during dependency resolutio...

6.1CVSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/16 4:08 p.m.8 views

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

7.8CVSS7.5AI score0.89721EPSS
SaveExploits102References2
Kitploit
Kitploit
added 2026/09/16 4:08 p.m.7 views

OpsGuard-simulation

OpsGuard - Simulation Dashboard 🖥️ This is the Frontend UI for OpsGuard. It serves as a visual "Brain" to demonstrate the autonomous SRE agent in action. Since OpsGuard is a backend-first agent, this dashboard is designed to simulate a production environment and visualize the agent's invisible...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 4:06 p.m.9 views

CVE-2023-36899

CVE-2023-36899 Reproduction environment and tooling for CVE-2023-36899, a cookieless session authentication bypass in the ASP.NET framework. Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework CVE-2023-36899 In modern web development, despite cookies being the preferred...

8.8CVSS7.3AI score0.76714EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 3:58 p.m.34 views

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

5.6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 3:51 p.m.7 views

CVE-2024-48990-PoC

CVE-2024-48990-PoC What is needrestart and how does it work? Needrestart is a widely used utility on Linux systems default on many Ubuntu versions that checks after a software update whether any service or the system itself needs to be restarted. By analyzing running processes, it determines if...

7.8CVSS7.9AI score0.20452EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/16 3:50 p.m.11 views

CVE-2022-0847-DirtyPipe

title: CVE-2022-0847 DirtyPipe Local Privilege Escalation Vulnerability Analysis date: 2022-03-08 14:41:20 tags: - Linux Privilege Escalation categories: - Security Research Vulnerability Description CVE-2022-0847 is a vulnerability in the Linux kernel since version 5.8, allowing an attacker to...

7.8CVSS7.2AI score0.89721EPSS
SaveExploits102References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/16 3:50 p.m.3 views

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Refer to...

9.8CVSS0.00525EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/16 3:50 p.m.9 views

How-to-Patch-CVE-2025-32709

How to Patch CVE-2025-32709 Vulnerbility Real-world patching workflow for CVE-2025-32709. From hotfix install to SIEM alert validation—this repo documents every step with screenshots, commands, and detection logic. Screenshot of the Wazuh Vulnerability Detection dashboard showing CVE-2025-32709...

7.8CVSS8.3AI score0.0214EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/16 3:50 p.m.3 views

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Ref...

9.8CVSS0.00525EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder