Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

redact v0.2.2

redact Strip credential-like content from free-form strings before they reach logs, telemetry, or any third-party surface Part of thephpboyscout Go toolkit — small, framework-free Go modules extracted from go-tool-base. Docs: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact redacts...

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

check-your-pulse

check-your-pulse Questa utility può aiutare a determinare se esistono indicatori di compromissione IOC nei file di log di un'appliance Pulse Secure VPN per CVE-2019-11510. La Cybersecurity and Infrastructure Security Agency CISA ha visto molte organizzazioni violare nonostante avessero installato...

CVE-2025-9090

CVE-2025-9090 लेखक: Byte Reaper विवरण यह एक्सप्लॉइट CVE-2025-9090 को लक्षित करता है, जो Tenda AC20 v16.03.08.12 राउटर में एक कमांड इंजेक्शन भेद्यता है। दोष एंडपॉइंट /goform/telnet में है, जिसे दूरस्थ रूप से ट्रिगर किया जा सकता है। जब एक्सेस किया जाता है, तो यह डिवाइस पर Telnet सेवा शुरू करता है,...

CVE-2025-6082

CVE-2025-6082 PoC per Full Path Disclosure Autore : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilità : Full Path Disclosure CWE-200 Descrizione Questa Proof‑of‑Concept sfrutta un bug di Full Path Disclosure nel plugin WordPress Birth Chart Compatibility versioni ≤ 2.0. Il POC...

jdwp-shellifier

Script di sfruttamento per JDWP Cos'è? Questo script di sfruttamento è pensato per essere usato dai pentester contro un servizio JDWP attivo, al fine di ottenere l'esecuzione remota di codice Remote Code Execution. Come funziona? In modo abbastanza standard, lo script richiede solo un interprete...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

tsh-sctp

Tiny SHell - An open-source UNIX backdoor root@kitploit: Before compiling Tiny SHell 1. First of all, you should setup your secret key, which is located in tsh.h; the key can be of any length use at least 12 characters for better security. 2. It is advised to change SERVERPORT, the port on which...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

cve-2024-25600

Exploit Repository: CVE-2024-25600 🔥 Unauthenticated RCE Exploit for WordPress Bricks Builder Welcome to the official repository for the CVE-2024-25600 exploit targeting WordPress Bricks Builder version 1.9.6 and below. This exploit allows for the execution of arbitrary code remotely, posing a...

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Exploit for CVE-2026-16348

CVE-2026-16348 TP-Link Archer BE800 V1 — Authenticated RCE v...

Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.118 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

bearer v2.1.1

Scan your source code against top security and privacy risks. Bearer is a static application security testing SAST tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks. Bearer offers a free, open solution, Bearer CLI, and a...

Qinglong-Combo-Exploit

🐉 Qinglong Combo Exploit Qinglong Panel Three Vulnerabili...

CVE-2026-75574

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

Nettacker v0.4.1

OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...