Important: Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update

An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2024-5274-Detection

CVE-2024-5274-Detection Guardian Code: Uno script per scoprire le vulnerabilità CVE-2024-5274 CVE-2024-5274 Script di rilevamento e aggiornamento della vulnerabilità zero-day di Google Chrome Panoramica Google ha recentemente corretto una quarta vulnerabilità zero-day in Chrome, nota come...

CVE-2025-9074-PoC

Docker API – Nicht authentifizierte RCE CVE-2025-9074 Eine kritische Sicherheitslücke CVE-2025-9074 in Docker Desktop ermöglicht lokal laufenden Linux-Containern, eine Verbindung zur Docker Engine API über das Standard-Subnetz 192.168.65.7:2375 herzustellen. Das Problem besteht unabhängig von...

bbot v3.0.2

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SharpPrivesc

SharpPrivesc Esercitandomi con C e riunendo le superfici di attacco Privesc. Roba ancora da principiante. Controlli Privesc e simili. Ho preferito le classi di parsing della riga di comando di Spectreops, quindi ho deciso di usare le loro invece di altri pacchetti .NET come command line parser ec...

CVE-2026-34908-check

Script di rilevamento della catena RCE non autenticata su UniFi OS Server Un rilevatore sicuro per la catena di esecuzione remota di codice non autenticata in UniFi OS Server ≤ 5.0.6, divulgato in Ubiquiti Security Advisory Bulletin 064: CVE| Classe| Ruolo nella catena ---|---|--- CVE-2026-34908 ...

CVE-2026-78122-POC

CVE-2026-78122 — प्रूफ ऑफ कॉन्सेप्ट Tecnativadocker-socket-proxy ≤ 0.5.0 — अपर्याप्त एक्सेस-नियंत्रण ग्रैन्युलैरिटी CWE-1220 CVSS 4.0: 8.3 उच्च — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N हमला वेक्टर एडजेसेंट आसन्न है AV:A: हमलावर को प्रॉक्सी तक लोकल/आसन्न नेटवर्क पहुँच की...

CVE-2026-41940

CVE-2026-41940: cPanel/WHM Authentifizierungs-Bypass Einzel- & Multi-Ziel Haftungsausschluss: Dieses Dokument und das zugehörige Skript exploit.py werden ausschließlich für Bildungszwecke, Sicherheitsforschung und autorisierte Penetrationstests bereitgestellt. Verwenden Sie diese Software nicht...

BadHost-CVE-2026-48710-Exploit

BadHost – CVE-2026-48710 Scanner Nur-Erkennungs-Scanner für den BadHost -Authentifizierungsumgehungsangriff in Starlette / FastAPI – bei dem die Auth-Middleware request.url.path anstelle von request.scope"path" liest, sodass ein präparierter Host-Header einen erlaubten Pfad einschleusen und die...

CVE-2026-58455-PoC

CVE-2026-58455 — Dockwatch Unauthentifizierte RCE Auth-Bypass + Befehlsinjektion Proof-of-Concept für CVE-2026-58455 : nicht authentifizierte Remote-Codeausführung in Dockwatch von Notifiarr, einer selbst gehosteten Docker-Container-Management-Web-UI. Betrifft alle Versionen bis einschließlich...

CVE-2026-34910-unifi-poc

UniFi OS CVE Proof of Concept Proof of Concept für autorisierte Tests gegen zwei Pfade, die wie folgt identifiziert wurden: CVE-2026-34910: Auth-Bypass, der zu Command Injection und Remote Code Execution über den Handler für Paketupdates führen kann. CVE-2026-34909: Path Traversal, der zu...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

CVE-2025-5304

CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - Autorizzazione mancante per l'escalation di privilegi non autenticata 🚀 PT Project Notebooks ≤ 1.1.3 — Escalation di privilegi non autenticata CVE-2025-5304 PoC e helper per l'exploit per PT Project Notebooks versioni 1.0.0–1.1.3 : la mancata...

heartbleed-masstest

यह टूल आपको कुशल मल्टी-थ्रेडेड तरीके से कई होस्ट्स पर Heartbleed के लिए स्कैन करने की अनुमति देता है। यह सर्वर को exploit किए बिना Heartbleed के प्रति संवेदनशील OpenSSL संस्करणों का परीक्षण करता है, ताकि heartbeat अनुरोध सर्वर से मेमोरी का कोई डेटा लीक न कराए या किसी भी डेटा को अनधिकृत तरीके से...

CVE-2021-3156-without-ip-command

CVE-2021-3156-बिना-ip-कमांड worawit/CVE-2021-3156 exploitnss.py का फोर्क, ip कमांड के बजाय ifconfig के साथ काम करने के लिए संशोधित root@kitploit: wget https://github.com/Bad3r/CVE-2021-3156-without-ip-command/raw/refs/heads/main/exploitnss.py or wget https://cdn.unsigned.sh/exploitnss.py...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ إثبات مفهوم لتصعيد الامتيازات المحلي عبر Dirty Frag ⚡ 📖 الوصف يحتوي هذا المستودع على إثبات مفهوم PoC لما يلي: CVE-2026-43284 — Dirty Frag يُظهر الاستغلال ثغرة تؤثر على أنظمة Linux الضعيفة. 🧠 حول Dirty Frag Dirty Frag يُشار إليها أحيانًا باسم Copy Fail 2 هي ثغرة...