CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Seitencache-Vergiftungs-Sicherheitslücke Executive Summary CVE-2026-46331 Spitzname „pedit COW“ ist eine lokale Linux-Kernel-Privilegienausweitungs-Schwachstelle im Traffic-Control-Subsystem. Ein unprivilegierter Benutzer in einem...

Unihackers---CVE-2025-55182-

ITALIAN GANG React2Shell PoC Questo repository fornisce un ambiente minimale intenzionalmente vulnerabile per testare gli scanner di sicurezza contro la recente vulnerabilità critica di RCE React2Shell che interessa React Server Components e Next.js. CVE-2025-55182 : Esiste una vulnerabilità di...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

Invoke-BadSuccessor.ps1

Invoke-BadSuccessor Missbrauchen Sie Erstellungsrechte für Delegated Managed Service Accounts dMSA in anfälligen Organisationseinheiten OUs, um in Active-Directory-Umgebungen Privilegien zu eskalieren BadSuccessor-Schwachstelle – CVE-2025-53779. Übersicht Invoke-BadSuccessor automatisiert eine...

LeakGauge

LeakGauge Dies ist das Code-Repository für unser Paper: The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges. ArXiv-Version und Paper-Link: https://arxiv.org/abs/2608.17829 Dieses Repository implementiert die LeakGauge-Pipeline zur Leakage-Erkennung:...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE 利用工具 CVE-2026-38751 概述 此 Python 脚本利用 OpenSTAManager 2.10 版本中的一个远程代码执行漏洞，编号为 CVE-2026-38751。该利用工具允许经过身份验证的用户上传恶意模块并在目标系统上执行任意命令。 漏洞详情 CVE ID ：CVE-2026-38751 产品 ：OpenSTAManager 版本 ：2.10 类型 ：远程代码执行 RCE 攻击向量 ：基于 Web，需要有效身份验证 利用原理 该利用工具遵循以下步骤： 1. 身份验证 ：使用提供的凭据登录 OpenSTAManager 应用 2...

CVE-2012-2982

CVE-2012-2982 사용자 OstojaOfficial의 원본을 개선한 CVE-2012-2982 Webmin 1.580용 Python POC 이 스크립트는 원본 스크립트의 개선 버전으로, 사용자가 전체 스크립트를 살펴보지 않고도 데이터 입력 형식을 확인할 수 있도록 합니다. 이를 위해 해당 코드 섹션을 단순히 스크립트 시작 부분으로 이동했습니다: 동시에 스크립트가 계속 실행되는 것을 방지하기 위한 종료 명령어sys.exit1가 추가되었습니다. 또한 사용자가 익스플로잇을 호출할 때 Webmin 1.580 서비스가 실행 중인...

CVE-2017-0785

CVE-2017-0785 PoC Armis가 공개한 Android 정보 유출 취약점을 기반으로 한 개인 학습용입니다. 추가 자료: https://www.facebook.com/khelfatni 실행하려면 pybluez와 pwntools가 설치되어 있어야 합니다. root@kitploit: sudo apt-get install bluetooth libbluetooth-dev sudo pip install pybluez sudo pip install pwntools...

CVE-2024-3400

Уязвимость CVE-2024-3400 Описание Уязвимость CVE-2024-3400 — это уязвимость безопасности, затрагивающая межсетевые экраны PAN-OS версий 10.2, 11.0 и 11.1. Данная уязвимость эксплуатируется, когда включены конфигурации шлюза GlobalProtect и телеметрии устройств. Злоумышленник может воспользоваться...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc होस्ट नाम द्वारा प्राप्त करें समस्या प्राप्त करने/जांचने के लिए कॉपी और पेस्ट करें root@kitploit: wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh संदर्भ:...

httpgrep

Descrição Uma ferramenta Python rápida e assíncrona que varre servidores HTTPS e procura por strings ou padrões regex nos corpos e cabeçalhos de respostas HTTP. Ela aceita hosts únicos, URLs, faixas CIDR, faixas de IP ou arquivos; varre múltiplas portas por alvo porta única, listas separadas por...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

androidReverse v20

Android Reverse A reverse engineering suite that runs entirely on Android. No PC, no ADB, no desktop tools — everything from APK extraction to native binary analysis happens on-device. MCP Server androidReverse includes a built-in Model Context Protocol server, allowing MCP-compatible AI clients ...

CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

Linux Distros Unpatched Vulnerability : CVE-2026-80183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by...

CVE-2026-37070

CVE-2026-37070 affects Veno File Manager Project 4.4.9 due to an incorrect access control flaw in the /vfm-admin/ajax/streamvid.php endpoint. An authenticated attacker who knows the path and filename of another user's uploaded file can retrieve it via a specially crafted GET request , resulting i...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3790-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3790-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

PT-2026-82785

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get arrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FIND IN SET SQL clause without proper sanitization. This allo...

CVE-2026-37069

Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint...

EUVD-2026-67264

Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with super administrator role to disclose sensitive information via two specially crafted http requests POST and GET to the...