CVE-2026-82600 SeaCMS zyapi.php sql injection

A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the file /zyapi.php?ac=videolist. Performing a manipulation of the argument ids results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

CVE-2026-0257

使用 TLS 的公钥伪造 GlobalProtect 身份验证覆盖 Cookie CVE-2026-0257 一个概念验证脚本，用于测试目标 PAN-OS GlobalProtect 门户或网关是否存在 CVE-2026-0257。该脚本会遍历 HTTPS 服务使用的证书链，并针对链中的每个公钥伪造一个有效的身份验证覆盖 Cookie，然后对 GlobalProtect 目标进行测试，验证其是否有效。 成功伪造的 Cookie 将登录 GlobalProtect 目标并检索 VPN 连接信息（使用 --verbose 参数查看详细信息）。 使用方法 root@kitploit: $...

CVE-2026-82597

A command injection vulnerability exists in TOTOLINK NR1800X (version 9.1.0u.6681_B20230703), specifically in the setUssd function of /cgi-bin/cstecgi.cgi . Manipulating the ussd argument allows a remote attacker with low privileges to inject arbitrary commands. The attack requires no user intera...

EUVD-2026-68300

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-82597 TOTOLINK NR1800X cstecgi.cgi setUssd command injection

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

PT-2026-83717

Name of the Vulnerable Software and Affected Versions valkey-io valkey version 9.1.0 Description A use after free flaw exists in the Blocked-on-keys Subsystem within the handleClientsBlockedOnKey function located in the src/blocked.c file. This issue can be triggered remotely, although the attack...

PT-2026-83969

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

Linux Distros Unpatched Vulnerability : CVE-2026-82623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file...

PT-2026-83791

Name of the Vulnerable Software and Affected Versions D-Link DNS-320L versions prior to 20260717 D-Link DNS-327L versions prior to 20260717 D-Link DNS-340L versions prior to 20260717 D-Link DNS-345 versions prior to 20260717 Description A remote OS command injection exists within the CGI Handler...

PT-2026-83984

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib X64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

PT-2026-83802

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description A flaw in the Web UI component allows remote attackers to bypass authentication. This occurs within the R7WebsSecurityHandler function located in the /goform/ate file. Recommendations At the moment,...

PT-2026-83803

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2026-82592

A stack-based buffer overflow in the D-Link DIR-825M (firmware 1.1.8) affects the Disk Formatting Handler Endpoint at /boafrm/formDiskFormat (function sub_46725C). By manipulating the partition argument, an authenticated remote attacker can trigger the overflow. The vulnerability is rated CVSS 3....

signatures

Signatures 本仓库旨在提供一种轻松创建和分发检测签名的方式。 尽情发挥创意，打造属于你自己的检测解决方案，完全不受许可限制的束缚。 为助力打击恶意行为，我们坚定地将我们的工作贡献至公共领域，以造福全世界。 🎉 下载已编译的签名 登录 GitHub 前往 actions 从 master 分支下载最新构建 依赖项 root@kitploit: sudo apt update sudo apt install make parallel docker.io jq sudo usermod -a -G docker $USER sudo systemctl enable docker...

ssh_Enum_vaild

sshEnumvaild CVE-2018-15473 の脆弱性を利用して有効な SSH ユーザー名を列挙する Bash スクリプトです。認証応答を分析することで、OpenSSH サーバー上の有効なユーザー名をチェックします。 特徴 ✅ OpenSSH の応答動作に基づいて有効な SSH ユーザー名を検出 ✅ 公開鍵認証バイパス手法を使用 ✅ 並列処理による高速化 ✅ 有効なユーザー名を自動的に validusernames.txt に保存 ✅ Bash と OpenSSH クライアントのみが必要な軽量設計 1. 有効なユーザー名のみを表示（出力から無効なものを除去）。 2...

CVE-2026-82553

A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqliquery of the file studentdashboard.php of the component Student Dashboard. The manipulation of the argument rollno results in improper...

EUVD-2026-68272

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

EUVD-2026-68273

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngapamfhandlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public...

CVE-2026-82551 Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngapamfhandlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public...

CVE-2021-26086

CVE-2021-26084 root@kitploit: 这是一个用 golang 编写的脚本，用于利用 Confluence OGNL 注入漏洞 CVE-2021-26084。 root@kitploit: git clone https://github.com/march0s1as/CVE-2021-26084/ cd CVE-2021-26084 go get -v github.com/fatih/color go build post.go ./post.go -h...