NashaVM

NashaVM – Native Sharp Virtual Machine Nasha ist eine virtuelle Maschine für .NET-Dateien und ihre Laufzeit wurde in C++/CLI erstellt. Installation root@kitploit: git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild Abhängigkeiten dnlib .NET Framewo...

torghost

Was ist TorGhost? TorGhost ist ein Anonymisierungsskript. TorGhost leitet den gesamten Internetverkehr über einen SOCKS5-Tor-Proxy um. Auch DNS-Anfragen werden über Tor umgeleitet, um DNS-Leaks zu verhindern. Das Skript deaktiviert auch unsichere Pakete, die das System verlassen. Manche Pakete wi...

PPLdump

PPLdump ⚠️ 2022-07-24 - A partire dall'aggiornamento di luglio 2022 di Windows 10 21H2 10.0.19044.1826 , l'exploit implementato in PPLdump non funziona più. Una patch in NTDLL ora impedisce ai PPL di caricare le Known DLLs. Maggiori informazioni qui. Questo strumento implementa un exploit userland...

PT-2026-83052

This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: submission-login: panic when mail max userip connections is reached bsc1276794. - CVE-2026-27852: DoS by sending mail with bad header bsc1276799. - CVE-2026-33604: SMTP smuggling via missing dot-stuffing afte...

PT-2026-83300

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout...

UBUNTU-CVE-2026-33604

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

CVE-2026-59307

An operator who calls JdbcMessageStore.addAllowedPatterns... to restrict deserialization receives no protection at all when the store is a Spring-managed bean. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12...

EUVD-2026-67192

An operator who calls JdbcMessageStore.addAllowedPatterns... to restrict deserialization receives no protection at all when the store is a Spring-managed bean. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12...

EUVD-2026-67023

pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named. A page in a brows...

PT-2026-82573

Name of the Vulnerable Software and Affected Versions tiger-gh-mcp-server versions prior to the commit that implemented the fix Description The MCP HTTP transport was started without enabling the host allow-list provided by the underlying SDK. Specifically, the httpServer.ts file called the...

TCGuard

TCGuard — Universal Crash, Exploit, Packet & Anti-Bot Protecti...

CVE-2026-74774

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-74774

Dell PowerProtect One , versions 20.1.0.0 and below , contains an Improper Certificate Validation vulnerability that allows an unauthenticated remote attacker to bypass a protection mechanism. The NVD-assigned score is 7.5 (HIGH) with a network vector, low complexity, and no privileges required, ...

CVE-2026-74774

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

EUVD-2026-66670

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

EUVD-2026-66423

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

CVE-2026-80350 OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

CVE-2026-80195

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098976 advisory. In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlanforwardsource Add RCU protection on struct...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098965 advisory. In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path...