CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Description Cet exploit démontre une vulnérabilité de téléversement de fichiers sans restriction dans Chamilo-LMS. La vulnérabilité affecte la fonctionnalité de téléversement de gros fichiers située à : root@kitploit:...

CVE-2025-8088

CVE-2025-8088 أداة بايثون للتعامل الآمن مع الأرشيفات، والوعي بالتنقل عبر المسارات، والاستخراج الآمن. مستوحاة من CVE-2025-8088. إثبات مفهوم للتعامل الآمن مع الأرشيفات أداة تعليمية للفريق الأزرق مستوحاة من مشاكل التنقل عبر المسارات مثل CVE-2025-8088. يساعد هذا السكريبت في كشف ومعالجة إدخالات الأرشي...

evilarc

evilarc Objectif evilarc vous permet de créer un fichier zip contenant des fichiers dont le chemin intégré contient des caractères de traversée de répertoire. La plupart des programmes zip commerciaux winzip, etc empêcheront l'extraction des fichiers zip dont les fichiers intégrés contiennent des...

gxdlmsdirector-cve

Gurux GXDLMS Director 多个漏洞 – 远程代码执行 Gurux GXDLMS Director 是一个开源的 Windows 程序，用于通过 DLMS/COSEM 协议与电能表交互。 该软件具有远程更新功能，可用于更新插件 DLL 以及包含 OBIS 代码的文件（与智能电表交互所需的设备特定定义）。 CVEID| 受影响产品及版本| 问题类型 ---|---|--- CVE-2020-8809| Gurux GXDLMS Director 8.5.1905.1301 之前的所有版本| CWE-494: 无完整性检查的代码下载 CVE-2020-8810| Gurux...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit root@kitploit: | || | \ / / | / | | | | أداة متقدمة لاستغلال ثغرة Path Traversal في WinRAR أداة بواجهة رسومية متطورة لإنشاء أرشيفات RAR خبيثة تستغل ثغرة Path Traversal في WinRAR CVE-2025-8088 باستخدام ADS ومعالجة ترويسات RAR5. الميزات استغلال ADS - تدفقات البيانات...

CVE-2024-50379

CVE-2024-50379 استغلال CVE-2024-50379 يجب أن يكون CVE-2024-50379.py و upload.txt في نفس الدليل. محتوى upload هو الحمولة webshell. محتوى upload هنا يقوم بإنشاء ملف 2.jsp. يمكن استخدام 2.jsp لإنشاء ملف 4.jsp جديد من نوع "Bingxie" الأصلي. root@kitploit:...

CVE-2026-74591

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

EUVD-2026-64528

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-71491 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, openstack-keystone-2026.1-fips, airflow, openstack-glance-2025.2, openstack-horizon-2025.2, openstack-keystone-2025.2-fips, openstack-placement-2026.1-fips, netbox, mlflow, openstack-horizon-2025.1-fips, apache-beam-python-3.14-sdk, superset,...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: kubeflow, openstack-kolla-toolbox-2025.1, tritonserver-backend-vllm-cuda-13.0, airflow, openstack-tempest-2025.2, synapse, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, opal, vast-csi, duplicity, k8s-sidecar, barman, vllm-cuda-13.2,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: kubeflow, openstack-kolla-toolbox-2025.1, tritonserver-backend-vllm-cuda-13.0, airflow, openstack-tempest-2025.2, synapse, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, opal, vast-csi, duplicity, k8s-sidecar, barman, vllm-cuda-13.2,...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.1 security update

Red Hat multicluster engine for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that a...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, openstack-keystone-2025.2-fips, duplicity, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, openstack-placement-2025.2,...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-glance-2025.2, apache-beam-python-3.12-sdk, openstack-horizon-2025.2, openstack-keystone-2025.2-fips, duplicity, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, openstack-placement-2025.2,...

CVE-2026-64268

CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update

The multicluster engine for Kubernetes 2.6 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.6 images The multicluster engine for Kubernetes provides the foundational components that are...