CVE-2022-2078

CVE-2022-2078 root@kitploit: $ ./poc ... + getset leakbuffer: 0000 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 0123456789:;? 0010 28 00 00 00 00 02 0a 8f 68 8b a2 be 40 ac 70 8c [email protected]. 0020 ff ff ff ff 00 6c b5 81 .....l.. + kernel=0xffffffff8c70ac40...

FleetCart 4.1.1 - Information Disclosure

Issues with information disclosure in redirect responses. Accessing the majority of the website's pages exposes sensitive data, including the "Razorpay" "razorpayKeyId". id: CVE-2024-5230 info: name: FleetCart 4.1.1 - Information Disclosure author: s4e-io severity: medium description: | Issues wi...

PT-2026-90481

In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kernel old timeval contains a four-byte hole after tv usec because tv sec is 64-bit while kernel suseconds t is 32-bit. put itimerval fills...

PT-2026-90082

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c master unregister i3c devs clears i3cdev-dev-desc before calling device unregister. During device unregister, device del emits a KOBJ REMOVE uevent and unbinds the...

CVE-2026-42533

Laboratorio CVE-2026-42533 — RCE por Clobbering de Capturas en Dos Pasadas en NGINX CVSS 9.2 Crítico — Desbordamiento de búfer en el heap pre-autenticación + fuga de información en nginx Afectados: nginx 0.9.6 – 1.30.3 / 1.31.2 | Parcheados: 1.30.4 / 1.31.3 Arquitectura root@kitploit:...

CVE-2025-65264

CVE-2025-65264 描述 在 CPU‑Z 2.17 及更早版本（以及其他使用 CPU-Z 驱动程序 1.0.6.1 及更早版本的产品）中，驱动程序（例如 cpuz161.sys）从用户提供的地址解引用一个值，并将其写入调用者提供的系统缓冲区。攻击者可以通过在输入缓冲区中提供目标地址，通过 IOCTL 读取任意内核内存。 PoC 这是一个简单的 PoC，用于读取 System 进程的令牌。 影响 这可能导致信息泄露。它还可以与存在任意内核写入漏洞的驱动程序结合，实现内核代码执行。 示例输出 免责声明...

Jakarta Tomcat 3.1 and 3.0 - Information Disclosure

Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access. id: CVE-2000-0760 info: name: Jakarta Tomcat 3.1 and 3.0 -...

DEBIAN-CVE-2026-87590

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-87523

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-87518

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

chakra-2016-11

chakra.dll Fuga de información + Confusión de tipos para RCE Exploit de prueba de concepto para fallos de Edge CVE-2016-7200 y CVE-2016-7201 Probado en Windows 10 Edge modern.ie estable. FillFromPrototypesTypeConfusion.html: WinExec notepad.exe FillFromPrototypesTypeConfusionNoSC.html: 0xcc INT 3...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74392

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87450

Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87590

CVE-2026-87590 is an improper input validation vulnerability in the Passwords component of Google Chrome (also affecting chromium-browser packages on Linux distributions). Versions prior to 153.0.8010.36 allow a remote attacker to potentially leak sensitive information by sending crafted network ...

PT-2026-88690

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-88705

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

PT-2026-88553

Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information...

kernel: ipv6: sit: reload inner IPv6 header after GSO offloads

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...