CVE-2015-6086

Vom Absturz zum Exploit: CVE-2015-6086 - Out-of-Bound Read/ASLR-Bypass root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$...

CVE-2026-81715

opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2017-0785

CVE-2017-0785 PoC Este é apenas um estudo pessoal baseado na vulnerabilidade de vazamento de informações do Android divulgada pela Armis. Leitura adicional: https://www.armis.com/blueborne/ Para executar, certifique-se de ter pybluez e pwntools instalados. root@kitploit: sudo apt-get install...

EUVD-2026-67089

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit per NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 è una critica lettura out-of-bounds non autenticata in Citrix NetScaler ADC/Gateway modalità Gateway o AAA vServer. Una singola richiesta artificiosa può scarica...

ios-gamed-0day

Exploit di gamed su iOS corretto in 15.0.2 Aggiornamento: Apple ha corretto silenziosamente questo problema in iOS 15.0.2 senza alcun riconoscimento pubblico o credito. Qualsiasi app installata dall'App Store può accedere ai seguenti dati senza alcun prompt all'utente: Email dell'ID Apple e nome...

EUVD-2026-66454

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

EUVD-2026-66449

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, leaking the quota...

CVE-2026-80588

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. Errors occurring during the receive path, before data is queued, may prevent the system from reclaiming forward-allocated memory. This can lead to an unbounded increase in memory usage under certain network conditions, suc...

CVE-2026-81705 openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

CVE-2026-81705 openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

CVE-2026-81705

openssl-encrypt versions before 1.4.9 fail to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g., -apHunter2) or abbreviated long-option spellings (e.g., --passw). The sanitizer only recognized exact option names, --option=valu...

CVE-2026-81101

Airtable MCP CLI before 0.2.5 contained a credential-disclosure flaw in its configure command. The ConfigureCommand.execute method in src/cli.ts persisted a user-supplied endpoint URL without validating it through createSafeUrl in src/config.ts—the helper that already restricted the equivalent en...

CVE-2026-81101 Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint

The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-80212

CVE-2026-80212 is a memory exhaustion vulnerability in the resolv gem before 0.7.2 for Ruby. The root cause is that Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create permanently register a new class for every unknown DNS resource rec...

CVE-2026-79771

A flaw was found in Nokogiri. Attackers can exploit a memory leak in the XSLT Stylesheet transform method by providing specially crafted input containing null bytes. This can lead to excessive memory consumption and enable a denial of service against long-running processes...

CVE-2026-76227

A flaw was found in Renovate. The application fails to restrict environment variables when it creates new child processes. This oversight allows these child processes, such as those used for package installation or post-upgrade tasks, to access all environment variables of the main Renovate...