nexphisher

Project not maintained anymore. UseZPhisher Installation : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher SETUP : bash setup SETUP TERMUX : bash tmuxsetup Run : bash nexphisher Single Command : root@kitploit: apt update ; apt install git -y ; git...

POC_CVE-2025-69194

CVE-2025-69194: Vulnerabilidad de Path Traversal en GNU Wget2 📝 Descripción PoC para CVE-2025-69194 , una vulnerabilidad crítica de Path Traversal en GNU Wget2 = 2.2.0 verificado en v1.99.1. Esta vulnerabilidad permite a atacantes lograr la escritura o sobrescritura arbitraria de archivos en el...

Linux Distros Unpatched Vulnerability : CVE-2026-8674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200...

EulerOS Virtualization 2.11.0 : autogen (EulerOS-SA-2026-3487)

According to the versions of the autogen package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function strstrsse2. The...

EulerOS Virtualization 2.12.1 : wget (EulerOS-SA-2026-3626)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within...

CVE-2026-8674

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

DEBIAN-CVE-2026-8674

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

CVE-2026-8674 Assertion failure in the DNS stub resolver with a long search domain

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

CVE-2026-8674

A assertion failure in the DNS stub resolver of the GNU C Library (glibc) versions 2.26 through 2.44 aborts any process that resolves names through the library. The root cause is that when the search list in /etc/resolv.conf or the LOCALDOMAIN environment variable contains a domain of roughly 200...

CVE-2026-8674 Assertion failure in the DNS stub resolver with a long search domain

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

gr-qradiolink

gr-qradiolink IMPORTANT NOTICE : This is AI-generated code. This code has not been reviewed by professional coders, it is a large task. There are tests available in the codebase, please review those and their code. GNU Radio out-of-tree OOT module for QRadioLink blocks. Branchmain: GNU Radio 3.10...

EUVD-2026-81906

Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory parameter used to construct GNU tar commands. The application...

CVE-2026-89036

Appwrite before 2.0.0 contains an argument injection vulnerability in the providerRootDirectory parameter used to construct GNU tar commands. The root cause is the use of escapeshellcmd instead of escapeshellarg without proper quoting, allowing TAB characters to survive sanitization and be interp...

CVE-2026-89036 Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter

Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory parameter used to construct GNU tar commands. The application...

CVE-2026-24061

Bypass de Autenticación por Inyección de Argumentos en GNU InetUtils telnetd CVE-2026-24061 En enero de 2026, se descubrió que el servicio GNU telnetd de GNU InetUtils era vulnerable a un bypass de autenticación porKyu Neushwaistein alias Carlos Cortes Alvarez. Registrada como CVE-2026-24061, est...

CVE-2021-3279

CVE-2021-3279 https://www.cvedetails.com/cve/CVE-2021-3279/...

CVE-2026-24061

CVE-2026-24061 - omisión de autenticación en telnetd de qué se trata Inyección de argumentos en telnetd de GNU InetUtils. Versiones 1.9.3 a 2.7. CVSS 9.8. En CISA KEV desde el 26.01.2026, es decir, explotado activamente en la naturaleza. Todo el truco consiste en que telnetd toma el valor de la...

CVE-2026-24061-GNU-inetutils-Telnet-Detector

Detector de CVE-2026-24061 GNU inetutils Telnet Una herramienta de detección pasiva y segura para identificar una posible exposición a CVE-2026-24061 , una vulnerabilidad que afecta a ciertas versiones de GNU inetutils telnet. Este proyecto está diseñado para pipelines de DevOps , auditorías de...

CVE-2026-24061

text feat3 1change feat2 1feat test CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9....

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Overview This repository contains a Proof‑of‑Concept exploit for GNU Inetutils telnetd remote authentication bypass vulnerability. The issue arises because telnetd improperly sanitizes the USER environment variable received via Telnet NEW‑ENVIRON negotiation before invoking /bin/login. By...