Linux Distros Unpatched Vulnerability : CVE-2026-80662

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH...

PT-2026-82831

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...

CVE-2023-34362

CVE-2023-34362: MOVEit Transfer RCE non autenticata Per una descrizione tecnica completa della vulnerabilità e dello sfruttamento, si prega di leggere la nostra Analisi di AttackerKB. Utilizzo root@kitploit: ruby CVE-2023-34362.rb Nota: il gadget di deserializzazione è configurato per eseguire...

CVE-2024-21413-Moniker-Link-Writeup

CVE-2024-21413 – Analisi della vulnerabilità Moniker Link Questa repository contiene un'analisi tecnica della CVE-2024-21413 , una vulnerabilità relativa alla gestione dei Moniker Links in Microsoft Outlook che consente agli attaccanti di bypassare la Protected View e di divulgare credenziali...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

OutlookLeakTest

Il Progetto Outlook HTML Leak Test! Post del blog: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ Cosa c'è in "./Schemes-List.xlsx"? Elenco di schemi URI che potrebbero funzionare in Windows. Questi schemi/protocolli...

appspec-yaml-leaks

बैज लाइसेंस MIT इंस्टॉलेशन...

citrix-netscaler-memory-leak

Badges Licenza MIT...

shell-history-leaks

Badges Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni qui Se non riesci a capire come fare, forse non dovresti usare questo strumento Installa tramite pip root@kitploit: pip install shell-history-leaks Esegui il comando qui sotto per verificare shell-history-leaks -h Configurazion...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS DoS locale del kernel Linux basato su memleak da un utente non privilegiato, basta prima fare una prctl PRTIMERCREATERESTOREIDSON come da https://x.com/spendergrsec/status/1990887509664928062...

eos

Nemici di Symfony EOS EOS saccheggia informazioni da un target Symfony in modalità debug: Sezione| Descrizione ---|--- General| Ottieni informazioni generali sul target. Phpinfo| Estrai le variabili d'ambiente Symfony dalla phpinfo esposta. Route| Ottieni l'elenco delle route registrate. Log dell...

CVE-2025-5777

CVE-2025-5777 Exploit per la Perdita di Memoria di Citrix NetScaler !WARNING Questo script è destinato esclusivamente a scopi educativi e di ricerca. Non utilizzarlo contro sistemi senza autorizzazione esplicita. L'accesso o il test non autorizzato è illegale e non etico. Leggi il DISCLAIMER...

CVE-2022-1972-infoleak-PoC

CVE-2022-1972 infoleak PoC Exploit infoleak per CVE-2022-1972. Puoi trovare l'articolo associato sul nostro blog Requisiti I namespace utente devono essere disponibili per utenti non privilegiati. root@kitploit: $ sysctl kernel.unprivilegedusernsclone kernel.unprivilegedusernsclone = 1 Compilazio...

nginx

CVE-2017-7529 당승표@portfolio10 Zusammenfassung Diese Übung reproduziert die Cache-Schwachstelle CVE-2017-7529, die bei der Verarbeitung von Range-Anfragen im Nginx-Server auftritt, und das tatsächliche Verhalten der Schwachstelle Schwachstelle: Durch einen Fehler bei der Verarbeitung des...

EUVD-2026-67204

When an IntegrationFlow uses .fluxTransform with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers replyChannel, errorChannel, correlationId, any propagated security/tenant headers copied from...

CVE-2015-6086

Vom Absturz zum Exploit: CVE-2015-6086 - Out-of-Bound Read/ASLR-Bypass root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$...

CVE-2026-81715

opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2025-10035_GoAnywhere

فاحص GoAnywhere CVE-2025-10035 الوصف فاحص خفيف بلغة Python يكتشف ما إذا كان مثيل GoAnywhere معرضًا لـ CVE‑2025‑10035. ترسل هذه الأداة طلب GET مصممًا بعناية مع User-Agent عشوائي باستخدام fake-useragent مع قائمة احتياطية، ولا تتبع عمليات إعادة التوجيه، وتفحص ترويسة Location، وتصنّف المثيل على أنه غ...

CVE-2017-0785

CVE-2017-0785 PoC Este é apenas um estudo pessoal baseado na vulnerabilidade de vazamento de informações do Android divulgada pela Armis. Leitura adicional: https://www.armis.com/blueborne/ Para executar, certifique-se de ter pybluez e pwntools instalados. root@kitploit: sudo apt-get install...