EUVD-2026-76274

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested maxpayloadlen svci3cmasterhandleibi reads the IBI payload from the RX FIFO into the IBI slot. The loop is bounded by the hardware FIFO size SVCI3CFIFOSIZE, not by the slot size...

CVE-2026-80951 i3c: master: svc: bound IBI payload to the requested max_payload_len

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested maxpayloadlen svci3cmasterhandleibi reads the IBI payload from the RX FIFO into the IBI slot. The loop is bounded by the hardware FIFO size SVCI3CFIFOSIZE, not by the slot size...

RedLine-Stealer-C2-Defender-Bypass-Payload-Analysis

1. C2 Connection – IP 198.46.86.63 Network analysis reveals that RedLine Stealer establishes a connection to the remote IP address 198.46.86.63. This IP is likely the malware's Command & Control C2 server, used for data exfiltration and command delivery. Key Observations: IP Address: 198.46.86.63...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with root@kitploit: dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploi...

MAL-2026-16131 Malicious code in aitextutils-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 59b5d893cd227654dae3bd7964e54ba20c99963660993e4239f34bba0d50b772 This package executes code from malicious dependency, which hides code downloading script, which then downloads and executes a heavily obfuscated final stage...

MAL-2026-16127 Malicious code in eth-account-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...

CVE-2026-46387

A flaw was found in Suricata, a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. A remote attacker could send a specially crafted HTTP/2 DATA payload with a high compression ratio. This could cause Suricata's HTTP/2 decompression path to...

sparkplugFuzzer

Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...

Blind-XSS-Manager

Blind-XSS-Manager Never forget where you inject. Description A Chrome extension that keeps track of the injected URL with Blind XSS payloads. It adds a unique value for each payload assigned to the URL and recorded by the extension when it gets coppied. The payloads are almost the same as the...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader is a fork of InlineExecute-Assembly to load .NET assembly and direct the output to mailslot. I rewrites it to a standalone loader with the following implementation: AES encryption payload Fileless payload support Patchless AMSI and ETW bypass using hardware...

DCOMUploadExec

DCOM Upload & Execute DCOM Lateral movement POC abusing the IMsiServer interface https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor The solution contains 2 projects DCOMUploadExec - A C++ project which hosts the lateral movement attack code AssemblyPayload - A .NET DLL...

GPU_ShellCode

gpu poisoning; hide the payload inside the gpu memory. after my older repo, in which i used the thread description to hide the payload, i wanted to find new way, so now im using nividia gpu memory using cuda api's to allocate, write, and free when there is no need for the payload to be found in...

JavaDeRe

Introducción del proyecto Se utiliza principalmente para codificar en base64 la clase al construir cargas útiles de eco echo para la deserialización de JAVA, y para decodificar cadenas en base64 durante una respuesta a incidentes, restaurándolas a archivos .class para inspeccionar la carga útil d...

DotNET_XorCryptor

DotNET XorCryptor You can also pay attention to an older project - NET-MalwareCryptor This is a .NET executable packer with payload encryption. Use for educational purposes only. How to use? --file path - specify file name --flood - add junk classes to file --proxy - move original entry point to...

riscy-business

riscy-business Article:RISC-Y Business: Raging against the reduced machine. Prerequisites Visual Studio 2022 with the C++ Clang Compiler for Windows 16.0.5 component CMake 3.26 earlier may work, but not recommended riscvm This folder contains the VM host rv64i interpreter. To build: root@kitploit...

Monitor

Project Description Used for implementing privilege persistence during the post-exploitation testing phase Project Usage Step 1 : Download the project, then compile Monitor.cpp using VS. Of course, you can also use the pre-compiled one. The Monitor.cpp code is as follows: root@kitploit: include...

St2-052

S2-052 POC Testing Original title: Tomcat Deploying war Original article: http://blog.csdn.net/caiqiiqi/article/details/77861477 Download the last affected version struts-2.5.12 from the Struts2 official website: http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip Note that you on...

Powshell-decode-payload

decode powershell gzip code sal a New-Object;a IO.StreamReadera IO.Compression.GZipStreamIO.MemoryStreamConvert::FromBase64String'xxxx',IO.Compression.CompressionMode::Decompress,Text.Encoding::ASCII.ReadToEnd root@kitploit: sal a New-Object;a IO.StreamReadera...

Gopherus

Gopherus If you know a place which is SSRF vulnerable then, this tool will help you to generate Gopher payload for exploiting SSRF Server Side Request Forgery and gaining RCE Remote Code Execution. And also it will help you to get the Reverse shell on the victim server. And for more information y...

CVE-2017-13089

CVE-2017-13089 Programa generador de payload para CVE-2017-13089. Esta versión requiere localizar manualmente la dirección de la pila donde se ejecutará el payload. También es posible que funcione directamente. En la parte de shellcode, buf es un payload normal generado con msf. Simplemente...