253183 matches found
CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-LA96365 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the sealed-secrets package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
f_poc_cve-2021-4034
fpoccve-2021-4034 usage root@kitploit: cd /tmp git clone https://github.com/jcatala/fpoccve-2021-4034/ cd fpoccve-2021-4034 gcc -fPIC -c ISO646.c ld -shared -shared ISO646.o -o s.so gcc f.c -o f ./f...
CVE-2021-4034
Python3 code to exploit CVE-2021-4034 PWNKIT. This was an exercise in "can I make this work in Python?", and not meant as a robust exploit. It Works For Me, there are problaby bugs. The default payload starts a shell as root, generated from msfvenom: root@kitploit: msfvenom -p linux/x64/exec -f...
CVE-2025-31161
Exploit CVE-2025-31161 INSTALLATION 1. root@kitploit: git clone https://github.com/cesarbtakeda/CVE-2025-31161.git && cd CVE-2025-31161 2. Modo De uso root@kitploit: sudo exploit2.py -h -u HOST -p PORT -tu TARGETUSER -nu NEWUSER -np PASSWORD ou 1. Depende da biblioteca lcurl root@kitploit: git...
CVE-2021-4034
CVE-2021-4034 This is an exploit created for CVE-2021-4034 meant as a POC. It is based off the info at https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt. How to use it: Download the exploit folder. Compile prog.c with gcc prog.c Go to the GCONVPATH=. folder and ensure that the "code" fil...
CVE-2021-42342
CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints root@kitploit: include include include include static void beforemainvoid attributeconstructor; static void beforemainvoid write1, "Hello World!\n", 14; POC2: reverse shell root@kitploit: include include include include char serverip=""; uint32t...
CLEANSTART-2026-DB46993 Prometheus is an open-source monitoring system and time series database
Multiple security vulnerabilities affect the prometheus-operator package. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...
CVE-2025-59489-POC
CVE-2025-59489-POC Proof Of Concept For CVE-2025-59489, first of its kind afaik. Checks affects unity games on the Android device. Tested on API26, Android 11, on Battle Nations version sept29 2025. Only has arm64-v8a included , compile libpreinit.so and add to jniLibs/ as necessary. Writeup Used...
CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...
PT-2026-89366
cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name and value against character sets that reject the semicolon separator, but the domain and path options are checked only against a permissiv...
UBUNTU-CVE-2026-80925
In the Linux kernel, the following vulnerability has been resolved: v...
UBUNTU-CVE-2026-80914
In the Linux kernel, the following vulnerability has been resolved: B...
UBUNTU-CVE-2026-87872
A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of t...
UBUNTU-CVE-2026-80921
In the Linux kernel, the following vulnerability has been resolved: K...
UBUNTU-CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP...
UBUNTU-CVE-2026-86564
Missing length validation before reading commanddata in virtio-net control queue handler...
UBUNTU-CVE-2026-87823
zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three...