CVE-2024-1086

CVE-2024-1086 A scopo didattico. Riferimenti: https://pwning.tech/nftables/ https://github.com/Notselwyn/CVE-2024-1086 Kconfig: root@kitploit: +CONFIGCONFIGFSFS=y +CONFIGSECURITYFS=y +CONFIGNFTABLES=y mnlcbrun: Operation not supported +CONFIGNETFILTERNETLINKGLUECT=y +CONFIGNETLINKDIAG=y...

CVE-2026-82249 gitoxide before 0.38.2 Credential Helper Protocol Field Injection

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

wordpress-php-object-helper

wordpress-php-object-helper Informazioni Hai un plugin noto con un exploit di oggetti PHP?, ma devi determinare quale libreria usare per sfruttare il problema ed eseguire con phpggc. Questo dovrebbe aiutarti. Output di esempio root@kitploit: $ python3 finder.py -u http://wordpress.lan -f...

Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. (CVE-2026-10535)

Summary IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. Vulnerability Details CVEID:CVE-2026-10535 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. CWE:CWE-121: Stack-based Buffer Overflow CVSS...

mhf

Mobile Helper Framework è uno strumento che automatizza il processo di identificazione del framework/tecnologia utilizzato per creare un'applicazione mobile. Inoltre, aiuta a trovare informazioni sensibili o fornisce suggerimenti per lavorare con la piattaforma identificata. Come funziona? Lo...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

CVE-2019-13272

CVE-2019-13272 Exploit locale di root Linux Linux 4.10 5.1.17 PTRACETRACEME root locale CVE-2019-13272 root@kitploit: In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows...

git-remote-gcrypt

================= git-remote-gcrypt GNU Privacy Guard-verschlüsseltes git-Remote :Handbuchabschnitt: 1 Beschreibung git-remote-gcrypt ist ein git-Remote-Helfer, um aus und in mit GnuPG verschlüsselte Repositories zu pushen und zu pullen, unter Verwendung eines benutzerdefinierten Formats. Dieser...

polkit security update

125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after Ymir's initial - commit 125-3.1. For some reason, 125-3.1 for rhel-10.2 was based on contents - of rhel-10.0 release instead of version 125-...

PT-2026-82198

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/shmem helper component where the -huge fault handler fails to verify if a PMD Page Middle Directory huge page mapping exceeds the boundaries of the VMA Virtual...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

EUVD-2026-66095

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow that allows an attacker to cause weak authentication . A successful exploit could lead to code execution , information disclosure , and data tampering . The CVSS 3.1 score is 8.1 (HIGH) , with a network attack...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

pwnkit-helper

Escalation locale dei privilegi di Pkexec Sorgente: PwnKit Exploit. Se vuoi saperne di più su questo exploit, controlla: CVE-2021-4034 Questo helper per l'exploit funziona bene con Python3 e assicurati di aver installato i pacchetti. Renderà facilissimo ottenere la Fl4g di root, BUONA FORTUNA!...

EUVD-2026-65392

hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430

CVE-2026-78430 is an OS command injection vulnerability in sworddut mcp-ffmpeg-helper versions 0.1.0, 0.1.1, and 0.2.1. The flaw resides in the handleToolCall function within the Tool Handler component (file src/tools/handlers.ts), where improper manipulation of the format argument allows command...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

EUVD-2026-65092

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...