CVE-2026-79419

A reflected cross-site scripting XSS vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to...

CVE-2026-75170

Cross-site scripting XSS vulnerability in the /loginController/doLogin endpoint of the HubCore platform version 14.1.1 allows a remote unauthenticated attacker to inject arbitrary JavaScript into the application's response via the language POST parameter...

CVE-2026-75164

An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to retrieve arbitrary files from the device filesystem via the file query string parameter...

CVE-2026-19306

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material secretkey, JWT signing keys, the application database, /proc/self/environ, and other tenants' upload directories — by supplying absolute pat...

CVE-2022-35499

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL...

Amsi-Bypass-Powershell

후원 Amsi-Bypass-Powershell 이 저장소에는 여러 블로그 게시물에서 찾은 일부 AMSI맬웨어 방지 검사 인터페이스 우회/회피 방법이 포함되어 있습니다. 대부분의 스크립트는 AMSI 자체에 의해 탐지됩니다. 따라서 트리거를 찾아 변수/함수 이름 변경, 문자열 대체 또는 런타임 시 인코딩 및 디코딩을 통해 해당 부분의 시그니처를 변경해야 합니다. 또는 ISESteroids나 Invoke-Obfuscation을 통해 난독화하여 작동하도록 할 수도 있습니다. 또한 유효한 우회를 다시 얻기 위해 수동으로 시그니처를 변경...

CVE-2021-46108

CVE-2021-46108 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ جهاز التوجيه D-Link DSL-2730E - ثغرة تخزين برمجية عبر المواقع XSS أجهزة D-Link DSL-2730E ذات الإصدار CT-20131125 تسمح بثغ...

EUVD-2026-71278

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828

CVE-2026-80828 affects the Linux kernel ALSA usb-audio subsystem. When usb_audio_resume() encounters a failure in snd_usb_pcm_resume() or snd_usb_mixer_resume() during system resume, it jumps to err_out, skipping the out: block that restores D0 power state and decrements chip->num_suspended_in...

CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

evil-winrm v4.1

Evil-WinRM The ultimate WinRM shell for hacking/pentesting Description & Purpose This shell is the ultimate WinRM shell for hacking/pentesting. WinRM Windows Remote Management is the Microsoft implementation of WS-Management Protocol. A standard SOAP based protocol that allows hardware and...

CVE-2024-3094

🚨 CVE-2024-3094 — XZ Utils Backdoor 🧠 Overview CVE-2024-3094 is a critical supply chain compromise affecting the widely used XZ Utils compression library. A malicious actor inserted a stealth backdoor into upstream releases, enabling remote code execution RCE via tampered liblzma. ⚠️ This...

Exploit for Code Injection in Apache Activemq

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector...

spyse.py

spyse.py Python API रैपर और कमांड-लाइन क्लाइंट जो spyse.com पर होस्ट किए गए उपकरणों के लिए है। "Spyse इंटरनेट सुरक्षा पेशेवरों, कॉर्पोरेट और दूरस्थ सिस्टम प्रशासकों, SSL/TLS एन्क्रिप्शन प्रमाणपत्र प्रदाताओं, डेटा केंद्रों और व्यावसायिक विश्लेषकों के लिए पूर्ण DAAS डेटा-एज़-ए-सर्विस समाधानों का एक...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

PrintNightmare

PrintNightmare تنفيذ بلغة بايثون لـ PrintNightmare CVE-2021-1675 / CVE-2021-34527 باستخدام Impacket القياسي. التثبيت root@kitploit: $ pip3 install impacket الاستخدام root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination port...

CVE-2026-19306 Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material secretkey, JWT signing keys, the application database, /proc/self/environ, and other tenants' upload directories — by supplying absolute pat...

CVE-2026-19306 Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material secretkey, JWT signing keys, the application database, /proc/self/environ, and other tenants' upload directories — by supplying absolute pat...