cve-2026-32699-facturascripts-nick-bypass

CVE-2026-32699 - FacturaScripts EditUser Nick Parameter Broken Access Control Description Summary The application fails to validate the nick parameter during a POST request to the EditUser controller. Although the UI prevents editing this field, a user can bypass this restriction using a proxy to...

CGA-GWXV-F97P-MG5P

Bulletin has no description...

GO-2026-6302 Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2

Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot 本地权限提升 ExploitDB ID: 52352 🧠 概述 本仓库记录了一个影响 Sudo 1.9.14 – 1.9.17 版本的严重 本地权限提升（LPE） 漏洞。 该漏洞源于 sudo -R --chroot 选项的错误实现，即使 sudoers 文件中未授权 ，攻击者也能 以 root 权限执行命令 。 🔥 结果： 未授权用户 → root shell 🧩 受影响组件 软件： sudo 受影响版本： 1.9.14 1.9.15 1.9.16 1.9.17 CVE ID： CVE-2025-32463 平台：...

firmware-analysis-toolkit v2.0.0-alpha.1

FAT — Firmware Analysis Toolkit Firmware Analysis Toolkit is a security research toolkit for investigating firmware security for IoT, Physical AI, Mobile Devices & Robotics. It is primarily built for the "Offensive IoT Exploitation" training conducted by Attify. It has been built based on actual...

CVE-2025-41244-PoC

PoC CVE-2025-41244 VMware Aria Operations &1" VERSIONEND done Extracto de get-versions.sh líneas 119-124: root@kitploit: getversion "/\S+/httpd-prefork|httpd|httpd2-prefork$|\s" -v getversion "/usr/bin|sbin/apache\S" -v getversion "/\S+/mysqld$|\s" -V getversion ".?/\Snginx$|\s" -v getversion...

CGA-6Q9C-GW72-P7W9

Bulletin has no description...

CVE-2026-33634-Scanner

CVE-2026-33634-Scanner Automated scanner for detecting indicators of compromise IOCs associated with the TeamPCP supply chain attack CVE-2026-33634 📋 Table of Contents Overview Vulnerability Features Detected IOCs Installation Usage Examples Report Format Project Structure System Requirements...

prosey

Prosey Prosey 是一个 CLI 工具，用于下载并显示 YouTube 视频的文字转录，让你无需浪费数小时就能获取所需信息。 主要使用场景包括： 总结 YouTube 视频并在 CLI 中通过单条命令显示（更快）。 阅读 视频字幕，按原视频章节格式化并组织（通常需要更多时间）。 两种用法都需要你系统上有一个 AI 助手（默认：opencode，使用 prosey config 配置你自己的）。 如果我们检测到你系统上有语法高亮器，你将获得漂亮的彩色输出。 Prosey 也可以原样输出或存储原生 JSON 格式。 功能特性 功能| 描述 ---|--- 💡 总结| 获取并总结视频...

nrf-research-firmware

RFStorm nRF24LU1+ Research Firmware Firmware and research tools for Nordic Semiconductor nRF24LU1+ based USB dongles and breakout boards. Requirements SDCC minimum version 3.1.0 GNU Binutils Python PyUSB platformio Install dependencies on Ubuntu: root@kitploit: sudo apt-get install sdcc binutils...

CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-沉默的网关风险 让攻击者无需破解密码、无需用户交互、甚至无需在你的网络中立足即可运行恶意代码。这就是 CVE-2025-27480 夜深了，你靠着红牛硬撑——我们都经历过。你在排查一个生产环境问题，强忍着回去睡觉的冲动，急于解决问题然后倒头就睡，于是你把远程桌面协议（RDP）访问暴露到了互联网上。你告诉自己稍后会关掉。但"过一会儿"变成了"永远不会"，那个被遗忘的网关变成了一扇沉默的门，等着任何一个碰巧带着网络嗅探器路过的人——哦，发现 3389 端口开放，真是"乐趣"无穷。 CVE-2025-27480...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Resumen Las versiones = 2.1.1 de rardecode no restringen el tamaño del diccionario al leer tamaños de diccionario RAR grandes, lo que permite a un atacante proporcionar un archivo RAR especialmente diseñado y causar una Denegación de Servicio mediante un fallo por Agotamiento d...

CVE-2026-8044

CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...

AZL-99957 CVE-2026-80917 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

DEBIAN-CVE-2026-80917

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

CVE-2026-80917

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

CVE-2026-77120

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating syste...

CVE-2026-70425

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to roo...

CVE-2026-23855

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote acces...

CVE-2026-19233

CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint...