PT-2026-93348

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get iodd port info endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device...

Linux Distros Unpatched Vulnerability : CVE-2026-89955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet...

Linux Distros Unpatched Vulnerability : CVE-2026-89997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl at the same time, it may be possible that the device is resumed after it ...

SUSE SLES15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4146-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4146-1 advisory. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing...

Linux Distros Unpatched Vulnerability : CVE-2026-90003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Prevent rcuwait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete...

SUSE SLES15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4152-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4152-1 advisory. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing...

(0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The specific flaw exists within the getshareddriveobject method. The issue results from the lack of proper validati...

SUSE SLES15 Security Update : kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4168-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4168-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4170-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4170-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: -...

CVE-2023-43318

CVE-2023-43318 JetStream Smart Switch - TL-SG2210P v5.0/ Control de Acceso Incorrecto / CVE-2023-43318 + Créditos: Shahnawaz Shaikh, Investigador de Seguridad en Cybergate Defense LLC + Twitter Proveedor: Tp-Link http://tp-link.com Producto: JetStream Smart Switch - TL-SG2210P Tipo de...

CVE-2025-46203

Descripción Unifiedtransform v2.0 es vulnerable a un Control de Acceso Incorrecto. Cualquier usuario estudiantes y profesores puede acceder y modificar los registros de estudiantes a través de los endpoints /students/edit/id. Esta funcionalidad está destinada exclusivamente al uso administrativo...

CVE-2025-46204

Descripción Unifiedtransform v2.0 es vulnerable a un Control de Acceso Incorrecto. Cualquier usuario estudiantes y profesores puede acceder y modificar los detalles de los cursos a través de los endpoints /course/edit/id. Esta funcionalidad está destinada exclusivamente para uso administrativo...

CVE-2025-10035_GoAnywhere

Comprobador de GoAnywhere CVE-2025-10035 Descripción Un comprobador ligero en Python que detecta si una instancia de GoAnywhere es vulnerable a CVE‑2025‑10035. Esta herramienta envía una solicitud GET manipulada con un User-Agent aleatorio usando fake-useragent con una lista de respaldo, no sigue...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR 一个使用 Rust 编写的小型 CLI 工具，用于复现与 CVE-2015-6668（Job Manager //文件名.ext）。 攻击模式：暴力枚举/猜测常见的年/月文件夹和文件名变体，以定位可访问的文件。 指示器：针对构造的 URL 返回 HTTP 200 响应，表示文件可公开访问。 该工具执行简单的 GET 请求，并（默认）报告第一个发现的公开文件。 描述 该漏洞源于上传内容的访问控制薄弱。如果应用程序将文件存储在可预测的公开位置且未进行适当的授权检查，攻击者可以枚举可能的文件路径并通过 HTTP...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty Pipe 是一种 Linux 漏洞利用方式，其 CVE 编号为 CVE 2022-0847。 我们用它来删除你 Ubuntu 上的所有文件。 环境： Ubuntu 20.04 Linux 内核 5.8 以下是 Ubuntu 20.04 的 ova 文件：https://ttuedutw-my.sharepoint.com/:u:/g/personal/410806228o365ttuedutw/EWPK1npa-V5EhebEOrwhocBMaKH12xVcIdtdkxxU3UFNg?e=clKIbQ 密码：ShaoLei0518 编译漏洞利用程...

CVE-2022-41082

CVE-2022-41082 此仓库包含一个概念验证（PoC）工具，用于利用 Microsoft Exchange 服务器中的 OWASSRF 漏洞（CVE-2022-41082）。该漏洞利用允许攻击者在服务器上执行任意命令，可能危及系统安全。 概述 该工具利用 OWASSRF 漏洞绕过身份验证，并在 Exchange 服务器上获得远程代码执行（RCE）能力。通过利用此漏洞，攻击者可以像已认证用户一样执行命令，从而导致严重的安全后果。 工作原理 1. 身份验证绕过 ：该工具连接到目标 Exchange 服务器，利用精心构造的请求绕过身份验证机制。 2. 远程代码执行...

CVE-2023-7028

CVE-2023-7028lab Implementación y explotación de la vulnerabilidad de apropiación de cuenta CVE-2023-7028, relacionada con los artículos semanales GO-TO CVE de la semana 11. Este repositorio contiene una configuración de Docker y un script de Python para probar la vulnerabilidad CVE-2023-7028 en...

CVE-2021-21985_PoC

Detalles de la Vulnerabilidad VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 El vSphere Client HTML5 contiene una vulnerabilidad de ejecución remota de código en un plugin de vCenter Server. Un actor malicioso con acceso a la red al puerto 443 podría explotar este...

CVE-2021-41773

CVE-2021-41773 Uso root@kitploit: docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py root@kitploit: docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py ¿Qué es CVE-2021-41773? CVE-2021-41773 Vulnerabilidad de directory traversal en Apache HTTP Server...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX Prueba de la vulnerabilidad Struts2 CVE-2017-5638 en Mac OS X descargar aplicación web de prueba y ejecutarla en tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ...