patch-openssl-CVE-2014-0291_CVE-2015-0204

patch-openssl-CVE-2015-0291CVE-2015-0204 Applica la patch a openssl con ansible Utilizzo : root@kitploit: pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2015-0291CVE-2015-0204 yourinventoryfile deve solo contenere il tuo elenco di server : root@kitploit: 192.168.0.10...

Rootsmart-v2.0

Rootsmart 2.0 mit cve-2019-2215 + Ransomware Haftungsausschluss Dieses Projekt dient ausschließlich Bildungszwecken. Dieses Projekt verwendet Code von rkshrksh/2048-Game und kangtastic/cve-2019-2215. Projektbeschreibung Dieses Projekt ist Teil des Moduls Mobile Security der Singapore Institute of...

xzwhy

xzwhy root@kitploit: / / / / \ / /\ Questo progetto è una Proof of Concept POC compatibile con Kubernetes per CVE-2024-3094, che interessa XZ Utils. Vedi questo articolo per un'ottima analisi dell'origine e del funzionamento dell'exploit. AVVERTENZA ⚠⚠⚠ L'esecuzione di uno qualsiasi dei comandi...

system_bt_AOSP10_r33_CVE-2020-0225

Fluoride Bluetooth stack Compilazione ed esecuzione su AOSP Basta compilare AOSP - Fluoride è presente per impostazione predefinita. Compilazione ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e 16.10 con Clang 3.8.0 Scarica il codice sorgente root@kitploit: mkdir...

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing AI, command traffic hiding in public infrastructure, malicious tools waiting before showing...

CVE-2021-27905

CVE-2021-27905 Server Side Request Forgery SSRF di Apache Solr ReplicationHandler Hit Counter Apache Solr che sta per Searching On Lucene with Replication è un motore di ricerca gratuito e open-source basato sulla libreria Apache Lucene. Scritto in Java. Apache Solr dispone di API RESTful XML/HTT...

CVE-2020-5902

CVE-2020-5902 F5 BIG-IP Interfaccia utente di gestione del traffico TMUI - Esecuzione di codice in remoto Nelle versioni BIG-IP 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 e 11.6.1-11.6.5.1, l'interfaccia utente di gestione del traffico TMUI, nota anche come utilità di...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Last week, there were 240 vulnerabilities disclosed in 184 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 105 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2019-2215

CVE-2019-2215 CVE-2019-2215 POC für Kernel 3.18 Basiert auf Maddie Stones POC von https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 Verwendung: adb push su98 /data/local/tmp adb push su98-memory-kallsyms /data/local/tmp adb shell G8231:/ $ cd /data/local/tmp G8231:/ $ chmod 755...

CVE-2024-51442

Descrizione CVE-2024-51442 è una vulnerabilità di command injection in minidlna/Readyshare versione %d; need to recreate...\n", ret, DBVERSION; sqlite3closedb; snprintfcmd, sizeofcmd, "rm -rf %s/files.db %s/artcache", dbpath, dbpath; if systemcmd != 0 DPRINTFEFATAL, LGENERAL, "Failed to clean old...

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

EUVD-2026-67078

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81735

UI-TARS-desktop (ByteDance) — the mcp-http-server package defaulted its listen address to :: when no host was supplied, binding Streamable HTTP and SSE MCP transports to every network interface. Authentication middleware was optional, and the @agent-infra/mcp-server-commands and @agent-infra/mcp-...

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

EUVD-2026-67054

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

CVE-2026-81698

openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block . The root cause is that untrusted metadata fields (such as pepper_name) are interpolated without quoting, allowing an attacker to craft metadata values containing shell com...

CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...