gitlab-profile

测试状态 : ↳ 核心编排器测试器 ↳ 文档测试器 创建日期: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ 此项目处于测试阶段！ 🎉 是的！我们很高兴宣布测试版即将完成！从版本 0.153 开始，所有针对首次 V1 发布流程的测试已启动！ root@kitploit: ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ ░░█▀▀░▀█▀░█▀█░█░█░▀█▀░█▀▀░░░░░░░░░░░░░░ ░░▀▀█░░█░░█░█░▄▀▄░░█░░▀▀█░░░░░░░░░░░░░...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

pig_CS4.4

注：仅供安全研究与学习之用，若将工具做其他用途，由使用者承担全部法律及连带责任，作者及发布者不承担任何法律及连带责任。 Cobalt Strike 4.4 猪猪版 该版本为预发布内测版本,公开版本即将在五月底发布 1. 去暗桩 2. 更改认证头 COOKIE改为Authentication 3. 更改get请求 与POST请求地址 4. 使用geacon二次开发版 替换beacon,可实现免杀实测火绒 360. 大概五月底发布 5. 更改为json相应包和请求包 6. CVE-2022-39197补丁 7. 修改ja3和ja3s特征...

The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

Fedora 44 : openvpn (2026-725faae162)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-725faae162 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

CVE-2026-72931

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

CVE-2026-69588

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-69497

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network...

CVE-2026-77500

A release of invalid pointer or reference vulnerability in the Windows Device Association Service allows an authorized attacker to escalate privileges locally. The flaw is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning an attacker with low local privileges and...

cve-2024-44308

cve-2024-44308 Michael Goppert, Michael Jennings y John Jennings Seguridad Este problema en WebKit fue parcheado mucho antes de que se publicara esta prueba de concepto. Por lo tanto, no supuso ningún peligro para usuarios reales: todo el propósito es documentar este tipo de exploits para que...

Windows Device Association Service Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-77104

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-77089

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

CVE-2026-77101

CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-77098

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77104

CommServe (Commvault) is affected by a path traversal vulnerability that can lead to information disclosure . The CVSS 4.0 base score is 8.3 (HIGH) , with a network attack vector, high complexity, and no required privileges or user interaction; attack requirements must be present. Confidentiality...

EUVD-2026-72730

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe...