CVE-2010-0426

CVE-2010-0426 https://www.cvedetails.com/cve/CVE-2010-0426/ sudo 1.6.x से पहले 1.6.9p21 और 1.7.x से पहले 1.7.2p4, जब एक स्यूडो-कमांड सक्षम होता है, तो स्यूडो-कमांड के नाम और एक मनमाने निर्देशिका में निष्पादन योग्य फ़ाइल के नाम के बीच मिलान की अनुमति देता है, जो स्थानीय उपयोगकर्ताओं को एक क्राफ्टे...

dns-rebinding-tool

مستوحى من @tavisio هذا المشروع يهدف ليكون مجموعة أدوات شاملة لاختبار هجمات إعادة ربط DNS DNS rebinding attacks ونظريتي في فهم هذا النوع من الهجمات. يتكون من خادم ويب وخادم DNS زائف يستجيب فقط لاستعلامات A. يسمح الجذر الرئيسي لخادم الويب بتكوين وتشغيل الهجوم باستخدام واجهة ويب أساسية. انظر...

CVE-2024-40110

CVE-2024-40110 - पोल्ट्री फार्म प्रबंधन प्रणाली v1.0 पोल्ट्री फार्म प्रबंधन प्रणाली v1.0 के लिए एक्सप्लॉइट एक्सप्लॉइट-डीबी वेबसाइट पर एक एक्सप्लॉइट ढूंढने के बाद और वह काम नहीं कर रहा था, मैंने कोड की समीक्षा करने और आवश्यकता के अनुसार इसे बेहतर बनाने का निर्णय लिया। एक बार जब यह काम कर गया, तो...

arya

आर्या - द रिवर्स YARA आर्या एक अनोखा उपकरण है जो YARA नियमों को ट्रिगर करने के लिए छद्म-दुर्भावनापूर्ण फ़ाइलें बनाता है। आप इसे एक रिवर्स YARA की तरह सोच सकते हैं क्योंकि यह बिल्कुल उल्टा करता है – यह आपके नियमों से मेल खाने वाली फ़ाइलें बनाता है। आप आर्या और यह कैसे काम करता है, इसके बारे में...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

CVE-2026-80901 ipvs: fix the checksum validations

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the checksum for ICMP packets only when we mangle the packets on MASQ or o...

EUVD-2026-71651

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the checksum for ICMP packets only when we mangle the packets on MASQ or o...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

Linux Distros Unpatched Vulnerability : CVE-2026-80901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the...

PT-2026-86192

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where checksum validations are missing or incorrect for certain packet types. Specifically, the ip vs in icmp v6 function fails to...

kuang_grade_mk11

kuanggrademk11 CVE-2013-0156 के लिए छद्म शेल।...

CVE-2018-7600

CVE-2018-7600 استغلال إثبات المفهوم لثغرة CVE-2018-7600 في دروبال لتنفيذ الأوامر عن بُعد مع شل زائف ودعم البروكسي...

CVE-2026-81097

The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: NFSv4.2: fixed issues related to nfs42sscopen. A destination server, when performing a COPY operation, should not accept the passed-in filehandle if it is not a regular filehandle. If the allocfilepseudo function fails, we nee...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bus: fsl-mc: Do not assume that child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as a child of fsl-mc devices, resulting in a crash when attempting to bind a fsl-mc device to VFIO. This...

CVE-2026-27490

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3...

CVE-2026-27490 Combodo iTop: Weak secret generation for inline image

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3...

CVE-2026-27490 Combodo iTop: Weak secret generation for inline image

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3...

PT-2026-79147

Name of the Vulnerable Software and Affected Versions bandit versions 1.4.0 through 1.12.4 Description An improper neutralization of CRLF sequences allows an unauthenticated remote attacker to smuggle Carriage Return CR, Line Feed LF, or Null NUL characters into application-visible request header...