CVE-2026-89578 dm-io: clone the source bio instead of copying its biovec

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

subzy

Subzy Herramienta de subdomain takeover que funciona comparando las huellas de respuesta de can-i-take-over-xyz Instalación root@kitploit: go install -v github.com/PentestPad/subzy@latest Si $GOBIN y $GOPATH están configurados correctamente, ejecute el programa como: root@kitploit: $ subzy --help...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

cve-2023-30990

cve-2023-30990-rce IBM i DDM RCE sin autenticación - Java Reverse Shell...

PT-2026-90467

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle in and handle out in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITS PER BYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits...

CVE-2026-89044

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final th...

PT-2026-90294

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DM IO BIO requests, do region built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

PT-2026-90360

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs dio iomap begin calls btrfs get extent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range, btrfs get bloc...

mimikatz-detector-condrv

Mimikatz Detector - ConDrv + ConsoleMonitor Este proyecto se basa en la investigación realizada para la técnica de detección de mimikatz fase 2. La solución contiene múltiples proyectos: ConsoleMonitor - Una aplicación GUI en C para capturar el tráfico relacionado con la consola entrada y salida ...

CVE-2022-3294

Referencia de Exploit: https://github.com/kubernetes/kubernetes/issues/113757 https://github.com/kubernetes/kubernetes/issues/119640 https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/security-audit-2021-2022/findings/Kubernetes%20v1.24%20Final%20Report.pdf...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Técnica de post-explotación para convertir la escritura/incremento arbitrario del kernel en una primitiva completa de lectura/escritura en Windows 11 22H2+ Este PoC utiliza el HackSysExtremeVulnerableDriver. El PoC admite tanto escritura arbitraria como incremento...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 POC de escalada de privilegios local autores: chompie & b33f Solo con fines de demostración. El exploit completo funciona en sistemas vulnerables de Windows 11 22H2. La primitiva de escritura funciona en todos los sistemas vulnerables. Uso: root@kitploit:...

portabilis-ieducar-user-type-privilege-escalation

Portabilis i-Educar = 2.1.13 Escalada de Privilegios Mediante Petición Arbitraria al Endpoint de Cambio de Tipo de Usuario Prueba de concepto para la explotación de la vulnerabilidad descrita en CVE-2025-11554, que concierne a la posibilidad de una escalada de privilegios durante peticiones...

CVE-2026-31431-cleaned

copyFail.py — Informe de Análisis de Exploit CVE Resumen copyFail.py es un exploit de prueba de concepto PoC que demuestra una vulnerabilidad de escalada de privilegios local en el kernel de Linux. Al abusar de la llamada al sistema splice en combinación con opciones de socket manipuladas, el...

CVE-2025-39436

🚨 WordPress 插件漏洞：CVE-2025-39436 📝 描述 在“I Draw”WordPress 插件中存在一个危险类型文件的不受限制上传 漏洞。此漏洞允许攻击者不受限制地上传恶意文件。该问题影响 I Draw 版本 1.0 及之前版本 。 🛠️ 漏洞详情 该漏洞利用插件的文件上传功能来执行 PHP 有效载荷。以下是使用的默认有效载荷： root@kitploit: phpcode = "" 🚀 使用方法 root@kitploit: usage: CVE-2025-39436.py -h -u URL -un USERNAME -p PASSWORD options: -h...

CVE-2026-79602

A flaw was found in Xen. A malicious guest operating system, when configured with a PCI device that has a Base Address Register BAR mapped to the I/O port space, can trigger an internal error within the Xen hypervisor. This vulnerability could lead to a denial of service, causing the host system ...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate 5.3.0 - Carga arbitraria de archivos sin autenticar que deriva en ejecución remota de código CVE-2026-13714 — WPL Real Estate RCE sin autenticar Realtyna Organic IDX plugin + WPL Real Estate para WordPress 5.3.0 Carga arbitraria de...

cve-2024-48325

CVE-2024-48325 描述： 已认证用户可利用 InstituicaoDocumentacaoController 类的 getDocuments 函数中存在的 SQL 注入漏洞。/module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid 中的 instituicaoid 参数未正确过滤，允许已认证的远程攻击者注入恶意 SQL 命令。 版本： 发现于 Portabilis i-Educar 2.8.0。 概念验证 漏洞详情 该问题存在于...

CVE-2026-41490

CVE-2026-41490 — SQL Injection in Dagster database I/O managers via dynamic partition keys Severity : High CVSS 8.x — AV:N/AC:L/PR:L/UI:N + C:H/I:H/A:H CWE : CWE-89 — SQL Injection Affected : dagster database I/O manager integrations — dagster-duckdb, dagster-snowflake, dagster-gcp BigQuery,...

389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet()

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...