CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Description Cet exploit démontre une vulnérabilité de téléversement de fichiers sans restriction dans Chamilo-LMS. La vulnérabilité affecte la fonctionnalité de téléversement de gros fichiers située à : root@kitploit:...

CVE-2025-8088

CVE-2025-8088 Outil Python pour la gestion sécurisée des archives, la détection des traversées de chemin et l'extraction sécurisée. Inspiré par CVE-2025-8088. PoC de gestion sécurisée des archives Outil pédagogique pour équipe bleue inspiré par les problèmes de traversée de chemin tels que...

evilarc

evilarc 目的 evilarc を使用すると、埋め込まれたパスにディレクトリトラバーサル文字を含むファイルを格納した zip ファイルを作成できます。ほとんどの商用 zip プログラム（winzip など）は、埋め込まれたファイルのパスにディレクトリトラバーサル文字が含まれる zip ファイルの解凍を防ぎます。しかし、多くのソフトウェア開発ライブラリには、このような保護メカニズムは実装されていません（例: Java、PHP など）。プログラムやライブラリがディレクトリトラバーサル文字を防いでいない場合、evilarc を使用して zip...

gxdlmsdirector-cve

Gurux GXDLMS Director 多个漏洞 – 远程代码执行 Gurux GXDLMS Director 是一个开源的 Windows 程序，用于通过 DLMS/COSEM 协议与电能表交互。 该软件具有远程更新功能，可用于更新插件 DLL 以及包含 OBIS 代码的文件（与智能电表交互所需的设备特定定义）。 CVEID| 受影响产品及版本| 问题类型 ---|---|--- CVE-2020-8809| Gurux GXDLMS Director 8.5.1905.1301 之前的所有版本| CWE-494: 无完整性检查的代码下载 CVE-2020-8810| Gurux...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit root@kitploit: | || | \ / / | / | | | | Продвинутый инструмент эксплуатации уязвимости обхода пути WinRAR Сложный GUI-инструмент для создания вредоносных RAR-архивов, использующих уязвимость обхода пути WinRAR CVE-2025-8088 с помощью ADS и манипуляции заголовками RAR5...

CVE-2024-50379

CVE-2024-50379 استغلال CVE-2024-50379 يجب أن يكون CVE-2024-50379.py و upload.txt في نفس الدليل. محتوى upload هو الحمولة webshell. محتوى upload هنا يقوم بإنشاء ملف 2.jsp. يمكن استخدام 2.jsp لإنشاء ملف 4.jsp جديد من نوع "Bingxie" الأصلي. root@kitploit:...

CVE-2026-74591

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

EUVD-2026-64528

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-71491 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, openstack-keystone-2026.1-fips, airflow, openstack-glance-2025.2, openstack-horizon-2025.2, openstack-keystone-2025.2-fips, openstack-placement-2026.1-fips, netbox, mlflow, openstack-horizon-2025.1-fips, apache-beam-python-3.14-sdk, superset,...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: kubeflow, openstack-kolla-toolbox-2025.1, tritonserver-backend-vllm-cuda-13.0, airflow, openstack-tempest-2025.2, synapse, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, opal, vast-csi, duplicity, k8s-sidecar, barman, vllm-cuda-13.2,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: kubeflow, openstack-kolla-toolbox-2025.1, tritonserver-backend-vllm-cuda-13.0, airflow, openstack-tempest-2025.2, synapse, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, opal, vast-csi, duplicity, k8s-sidecar, barman, vllm-cuda-13.2,...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.1 security update

Red Hat multicluster engine for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that a...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, openstack-keystone-2025.2-fips, duplicity, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, openstack-placement-2025.2,...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, openstack-keystone-2025.2-fips, duplicity, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, openstack-placement-2025.2,...

CVE-2026-64268

CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update

The multicluster engine for Kubernetes 2.6 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.6 images The multicluster engine for Kubernetes provides the foundational components that are...