CacheGuard config import eval injection RCE

Admin login and multipart upload to /gui/conf-load-save.apl injects $cmd into config; transaction commit eval executes as admin. !/usr/bin/env python3 -- coding: utf-8 -- """CacheGuard authenticated config import eval injection RCE.""" from future import annotations import re from urllib.parse...

MultiTech Conduit import_config filename command injection RCE

Authenticated POST /api/command/uploadconfig with malicious filename breaks out of importconfig shell quoting. """MultiTech Conduit AEP importconfig filename command injection root RCE.""" from future import annotations import json from kittysploit import from lib.protocols.http.httpclient import...

Syncrify PublicLink chunk upload traversal cron root RCE

Backup user PublicLink auth then binary chunk upload st=u with traversing chunk name writes /etc/cron.d/. """Syncrify PublicLink chunk upload path traversal cron root RCE.""" from future import annotations import re import struct import time from urllib.parse import quote from kittysploit import...

AOMEI Cyber Backup Thrift NAS mount injection RCE

AddBackupStorageNAS + DeleteBackupStorage: NAS username quote-break into CNasHelper mount system ports 9074/9078. """AOMEI Cyber Backup Unauthenticated Thrift NAS Mount Injection RCE""" from future import annotations from kittysploit import import os import socket import struct import sys import...

Wyn Enterprise unauthenticated token forgery provider load root RCE

Forged integration JWT → admin reference token → admin/api/import Zip-Slip EvilProvider.dll → security-providers reload. """Wyn Enterprise token forgery import Zip-Slip EvilProvider load root RCE.""" from future import annotations import base64 import io import json import re import zipfile from...

EUVD-2026-8832

Ajenti has potential Remote Code Execution...

AirStrike

📡 AirStrike - Simple Wi-Fi Auditing on Linux 🖥️ What AirStrike Does AirStrike is a Linux GUI tool for authorized Wi-Fi security auditing. It helps you set up monitor mode, scan access points and clients, capture WPA/WPA2 handshakes, and test password strength offline with hashcat. It is built for...

checkmk_php2shell

checkmkphp2shell A Checkmk extension that shows, for every PHP installation on a Linux host, whether it is affected by PHP2Shell - the pre-authentication remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 , disclosed and fixed on 2026-10-21 in PHP 8.2.35, 8.3.36, 8.4.27 and...

Important: Red Hat Security Advisory: brotli security, bug fix, and enhancement update

An update for brotli is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

flatpak security update

An update is available for flatpak. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak is a system for building, distributing, and running sandboxed deskto...

oci-seccomp-bpf-hook security update

An update is available for oci-seccomp-bpf-hook. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OCI Hook to generate seccomp json files based on EBF syscalls...

httpd security update

An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

skopeo security update

An update is available for skopeo. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The skopeo command lets you inspect images from container image registries, g...

lrzsz security, bug fix, and enhancement update

An update is available for lrzsz. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem...

grafana security update

An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

freeipmi security, bug fix, and enhancement update

An update is available for freeipmi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The freeipmi packages contain an Intelligent Platform Management Interface...

python3.9 security update

An update is available for python3.9. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming language...

flatpak security update

An update is available for flatpak. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak is a system for building, distributing, and running sandboxed desktop...

flatpak security update

An update is available for flatpak. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak is a system for building, distributing, and running sandboxed desktop...

libX11 security update

An update is available for libX11. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libX11 packages contain the core X11 protocol client library. Security...