Linux Distros Unpatched Vulnerability : CVE-2026-80667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller tha...

Linux Distros Unpatched Vulnerability : CVE-2026-80626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/perf: fix preempt count underflow in fslembpmudel fslembpmudel unconditionally calls putcpuvarcpuhwevents at the 'out:' label, but only calls the matchi...

SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:3830-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3830-1 advisory. - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through Augu...

PT-2026-83741

pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer method that allows attackers to cause denial of service by supplying a crafted PDF with a FlateDecode stream containing a decompression bomb. Attackers can upload a small...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.14)

The version of AHV installed on the remote host is prior to 10.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.14 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.16)

The version of AOS installed on the remote host is prior to 7.3.1.16. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.16 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

PT-2026-83884

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

wp2shell

CVE-2026-63030 + CVE-2026-60137 - «wp2shell»: неаутентифицированный RCE в ядре WordPress REST API путаница маршрутов batch route confusion CVE-2026-63030 в связке с SQL-инъекциейauthornotin в WPQuery CVE-2026-60137 → удалённое выполнение кода без аутентификации на стандартной установке WordPress...

kmon

리눅스 커널 관리자 및 활동 모니터 🐧💻 커널 은 하드웨어 구성 요소와 소프트웨어 구성 요소 간의 상호 작용을 가능하게 하는 운영 체제의 핵심 부분입니다. 대부분의 시스템에서 커널은 부트로더 다음으로 시작될 때 로드되며 I/O 요청과 키보드, 모니터, 네트워크 어댑터, 스피커 같은 주변 장치를 처리합니다. 일반적으로 커널은 메모리 관리 , 프로세스 관리 , 장치 관리 , 시스템 호출 , 보안 을 담당합니다. 애플리케이션은 시스템 호출 메커니즘을 사용하여 운영 체제에 서비스를 요청하며, 대부분의 경우 이 요청은 관련 커널 함수를...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 est un outil de découverte de sous-domaines qui trouve et résout les sous-domaines valides, puis effectue du fuzzing SSRF/LFI/SQLi, du brute-force et du scan de ports. Il possède...

moltis v20260818.08

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...

Agentic-Bug-Hunter

BugHunter Охота за багами с помощью ИИ — от разведки до отчёта, прямо в вашем терминале. Бесплатная настройка · Быстрый старт · Команды · Что он находит · Установка · FAQ !BUGHUNTER — конвейер автоматизации Bug...

CVE-2025-59528-PoC

CVE-2025-59528 Учебный PoC Только для образовательных целей. Этот проект предназначен для контролируемых исследований в области безопасности, учебных демонстраций и авторизованного тестирования в изолированной лаборатории. Не используйте его против систем, сетей, приложений или учётных записей,...

Exploit for Code Injection in Gitea

🫖 CVE-2026-60004 Gitea Validator A standalone discovery, as...

HawkScan

HawkScan Outil de sécurité pour la reconnaissance et la collecte d'informations sur un site web. python 3.x Nouvelles Installation Fonctionnalités spéciales À faire Utilisation Exemples Remerciements Dons Outils utilisés Wiki Nouvelles v2.x root@kitploit: - Ajout de la fonction proxy - Redéfiniti...

cve-2026-43499

GhostLock Exploitation Failure Summary on PD2229 SM8475, 5.10.233 GKI I. Vulnerability and Device Facts 1.1 CVE-2026-43499 GhostLock Basic Information Item| Value ---|--- Vulnerability Type| Stack Use-After-Free in the rtmutex / futex PI path Introduced Version| Linux 2.6.39-rc1 May 2011, commit...

CVE-2021-20323

Badges Licence MIT Installation...

TeamPass v3.2.2.0

Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub !Docker...