CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom A Bluetooth Classic RFCOMM service of Parani M10 Intercom is exposed without enforcing secure authentication or proper access control. Once within range, any device can Establish a connection without proper...

poc_CVE-2025-68613

PoC：n8n沙箱逃逸（CVE-2025-68613） 仅供教育目的 本概念验证展示了n8n中的一个严重漏洞（CVE-2025-68613）。请勿在非您拥有或未经明确许可的系统上使用。 漏洞概述 n8n 1.122.0 之前的版本包含一个远程代码执行（RCE）漏洞。已认证用户可以通过工作流表达式编辑器中的特定JavaScript负载绕过表达式沙箱，在宿主系统上执行任意代码。 1. 设置易受攻击环境 创建一个数据卷并运行易受攻击版本的n8n（例如v1.120.0）。 root@kitploit: Create volume for persistence docker volume...

CVE-2023-48022

CVE-2023-48022 Exploit de CVE-2023-48022 modificado a partir del trabajo de Bishop Fox Cómo usar establece la ip y el puerto en jobs.py establece el payload en malicious.py $ pip install ray $ python3 jobs.py...

CVE-2026-1306

CVE-2026-1306 — midi-Synth WordPress PoC / ejecutor de listas multidiana basado en Python para CVE-2026-1306 en el plugin midi-Synth de WordPress. ¿Para qué sirve? Recopila el valor midiSynthnonce mediante HTTP desde las páginas donde se carga el shortcode midiSynth en los sitios objetivo. Envía...

L4sh

Exploit RCE Log4Shell Exploit totalmente independiente que no requiere binarios de terceros. El exploit distribuye el payload a todos los encabezados HTTP registrados posibles, como X-Forwarding , Server-IP , User-Agent Uso root@kitploit: python main.py -i lhost -u http://target:targetport -c...

CVE-2026-20340 Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution Vulnerability

A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by...

EUVD-2026-81116

A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by...

CVE-2026-20340 Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution Vulnerability

A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by...

CVE-2026-20340

Cisco Secure Firewall Management Center (FMC) Software is affected by an unsecured deserialization vulnerability in web-management user-controlled data. An authenticated remote attacker with at least the Security Analyst (read-only) role can send a crafted HTTP payload to the device, save it, and...

CVE-2026-31431-exp

Adaptado de https://github.com/theori-io/copy-fail-CVE-2026-31431. Se han añadido características como cifrado y ofuscación del payload, escritura de caché para mejorar la estabilidad del sistema, chunks adaptativos, cero dependencias y soporte multiarquitectura x86, arm, i386, etc.. En teoría, s...

CVE-2026-46352 Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protoc...

CVE-2026-31431

copyfun demostración simple del exploit de cve 2026-31431 copyfun envenenará la caché del archivo objetivo especificado con los bytes de carga útil proporcionados...

RLSA-2026:54184 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads CVE-2026-42127 For more details about the security issues, including the...

MaldevAcademyLdr.2

MaldevAcademyLdr.2: Implementación de RunPE con múltiples técnicas evasivas Enlaces rápidos Inicio de Maldev Academy Plan de estudios de Maldev Academy Precios de Maldev Academy !NOTE Aunque este repositorio puede utilizarse para ejecutar otros binarios, el enfoque principal fue ejecutar el...

CVE-2026-92139

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted...

CVE-2016-4010

CVE-2016-4010 CVE-2016-4010 Ejecuta exploit.php para generar el payload json Ejecuta exploit.py con el payload generado en triggervulnerabilitypayload...

WhatsRCE

WhatsRCE Esta es una herramienta de generación automatizada de payloads para CVE-2019-11932 Ejecución Remota de Código en WhatsApp 1. Instalación automática de GCC comando inofensivo, puedes ver que es de código abierto 2. Guardado en archivo .GIF ¿Cómo Usarlo? root@kitploit: sudo apt install git...

CVE-2026-92139

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted...

EUVD-2026-80763

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted...

CVE-2026-92139

The Jenkins Bitbucket Push and Pull Request Plugin (versions 4.0.1 and earlier) is affected by a Server-Side Request Forgery (SSRF) vulnerability in its webhook endpoint (/bitbucket-hook/). The plugin trusts URL values supplied in the webhook payload and uses its configured Bitbucket credentials ...