EUVD-2026-76737

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing...

Linux Distros Unpatched Vulnerability : CVE-2026-89448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible...

phuip-fpizdam

PHuiP-FPizdaM Qué es esto Esto es un exploit para un bug en php-fpm CVE-2019-11043. En ciertas configuraciones de nginx + php-fpm, el bug puede activarse desde el exterior. Esto significa que un usuario web puede obtener ejecución de código si tienes una configuración vulnerable consulta a...

CVE-2021-25253

root@kitploit: Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 趋势科技 OfficeScan 客户端： 10.0 及以下版本在 OfficeScan 客户端文件夹上存在错误的 ACL...

DEBIAN-CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

AZL-100874 CVE-2026-89448 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

UBUNTU-CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448 iommu/vt-d: Force requesting ACS when tboot is enabled

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448 iommu/vt-d: Force requesting ACS when tboot is enabled

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

EUVD-2026-76354

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

CVE-2026-89448 is a CRITICAL (CVSS 9.3) vulnerability in the Linux kernel's Intel VT-d IOMMU subsystem. The function detect_intel_iommu() fails to check for tboot when determining whether to request ACS (Access Control Services) . When tboot is enabled, tboot_force_iommu() forces the IOMMU on, bu...

supahunter

Supabase Hunter OP Mode Advanced Reconnaissance & Exploitation Tool for Supabase Instances. SupaHunter is a powerful Python tool designed to identify, analyze, and exploit misconfigured Supabase projects. It goes beyond simple table enumeration, offering deep inspection capabilities, Selenium-bas...

directus-security

directus-security 実際にデータを漏洩させる設定ミスを監査できます — 公開ロールの読み取り露出、ユーザー列挙、認証なしのバージョン/スキーマ漏洩、GraphQL introspection、そして search パラメータのフィールド列挙オラクル — それぞれを匿名プローブで実際に証明します。他のチェックリストは かもしれない ことを教えますが、これはバイトを取得して 実際にどうであるか を見せます。 ⚡ 1行で実行、管理トークン不要、インストール不要: root@kitploit: npx directus-security --url...

langflow-cors-scanner

CVE-2025-34291 — Langflow 来源验证 / CORS 概述 过度宽松的 CORS 配置与刷新令牌 Cookie 配置相结合，可导致凭据被盗。 字段| 值 ---|--- CVE| CVE-2025-34291 严重性| HIGH 产品| Langflow CISA KEV| 2026-05-21 攻击类型| 来源验证 / CORS 是否需要认证| 无 受影响版本 状态| 版本 ---|--- ❌ 存在漏洞| Langflow 1.3.5 之前的版本 ✅ 已修复| 已在 Langflow 1.3.5+ 中修复 安装 root@kitploit: Clone git...

DroidSniper

DroidSniper - 配置错误的 Android 调试桥接扫描器 🎯 该工具 DroidSniper 旨在检测 Android 设备上配置错误的 Android 调试桥接（ADB）协议。这些设备因配置错误而容易受到通过 ADB 进行的未经授权访问。通过扫描缺少适当身份验证的 ADB 实例，安全团队可以识别并缓解潜在漏洞，保护设备免受未经授权的访问。🛡️ 功能 🌟 扫描网络 ：快速扫描网络上开放 ADB 端口的设备。🔍 配置错误检测 ：识别 ADB 在未进行身份验证的情况下配置的设备，突出潜在的安全风险。⚠️ 连接到你的目标 🎯 以下是在目标没有 ADB...

SpringBoot_Actuator_RCE

swagger-ui 接口 /swagger-ui.html SpringBoot env 获取 敏感信息 一 当我们直接访问 springboot 站点时,可以看到某些 password 字段填充了 1. 通过$name 可以获取明文字段 2. 配置不当导致敏感信息泄露password 打星号,而 pwd 没有打星号 参考 https://mp.weixin.qq.com/s/HmGEYRcf1hSVw9Uu9XHGsA 具体实现过程: 例如: 我们要获取 pid 参数值 root@kitploit: "PID": "10648", root@kitploit: POST /env...

service-now

service-now Service-Now 文章暴力破解器 这里的思路是，文章可能存在配置错误，从而可能泄露敏感信息。 如有任何问题，请在此处提出 - https://github.com/RandomRobbieBF/service-now/issues 或提交一个 PR！ 使用方法 root@kitploit: python3 service-now.py -u somecompanyservice-now.com root@kitploit: usage: service-now.py -h -u URL -p PROXY service-now.py: error: the...