trivy-repo

trivy-repo deb/rpm repository for Trivy Debian/Ubuntu root@kitploit: $ sudo apt-get install wget apt-transport-https gnupg $ wget -qO - https://get.trivy.dev/deb/public.key | gpg --dearmor | sudo tee /usr/share/keyrings/trivy.gpg /dev/null $ echo "deb signed-by=/usr/share/keyrings/trivy.gpg...

CVE-2026-41651

🚨 CVE-2026-41651 — Pack2TheRoot PackageKit 中的权限提升漏洞（TOCTOU 竞态条件） 📌 概述 CVE-2026-41651 是一个影响多种 Linux 发行版中 PackageKit 系统服务的本地权限提升漏洞。 该漏洞由 检查时间到使用时间（TOCTOU）竞态条件 引起，可被滥用以操纵软件包安装流程并将权限提升至 root。 ⚠️ 影响 若成功利用，该漏洞可能允许本地非特权用户： 获得 root 级权限 执行 任意软件包安装脚本（RPM scriptlets） 修改系统级配置 破坏系统完整性与机密性 🧠 注意：该漏洞需要本地访问...

go-rpmdb

go-rpmdb Biblioteca para enumerar paquetes en un archivo Packages de la base de datos RPM sin bindings. root@kitploit: package main import "fmt" "log" rpmdb "github.com/knqyf263/go-rpmdb/pkg" func main if err := run; err != nil log.Fatalerr func run error db, err := rpmdb.Open"./Packages" if err ...

CVE-2024-22026

CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...

CVE-2015-7547

CVE-2015-7547 Script de prueba de vulnerabilidad de glibc Este script de shell permite probar la vulnerabilidad de glibc CVE-2015-7547. Está escrito para sistemas basados en rpm como Red Hat Enterprise Linux / RHEL / CentOS 5/6/7. La detección para otras distribuciones puede seguir. Resolución 1...

tippa-my-tongue

Tippa My Tongue Tippa My Tongue is an exploit that uses CVE-2022-1388 and CVE-2022-41800 to establish a root reverse shell on F5 BIG-IP products. Most CVE-2022-1388 exploits achieve code execution using /mgmt/tm/util/bash. However, this exploit uses /mgmt/shared/iapp/rpm-spec-creator, followed by...

tricorne

Tricorne A Fedora Remix for offensive security. "My treasure? If you want it, I'll let you have it. Seek it out! I left everything at that place!" Gol D. Roger The short version Kali owns Debian. BlackArch owns Arch. Parrot owns the "security-focused desktop" niche. No one owns RPM-world offensiv...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.7: loki3.7-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-canary-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-logcli-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-3.7.8-0.2.hum1.src src Security Fixes: loki3.7:...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.6-0.2.hum1 aarch64, x8664 grafana13.1-13.1.6-0.2.hum1.src src Security Fixes: grafana13.1: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.3-0.3.hum1 aarch64, x8664 tempo3.0-3.0.3-0.3.hum1.src src Security Fixes: tempo3.0: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.6-0.3.hum1 aarch64, x8664 opentofu1.12-1.12.6-0.3.hum1.src src Security Fixes: opentofu1.12: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo2.10: tempo2.10-2.10.8-0.3.hum1 aarch64, x8664 tempo2.10-2.10.8-0.3.hum1.src src Security Fixes: tempo2.10: CVE-2026-81871...

CVE-2026-64561-Kernel-Fix

Actualización del kernel de Linux para corregir CVE-2026-64561 Aviso: Este repositorio solo documenta mi proceso personal de corrección en un entorno de servidor específico. No es un análisis de seguridad profesional. Se aceptan correcciones. I. Introducción Esta guía ofrece dos métodos para...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.6.hum1 aarch64, x8664 grafana12.4-12.4.10-0.6.hum1.src src Security Fixes: grafana12.4: CVE-2026-61709...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

EulerOS Virtualization 2.12.0 : rpm (EulerOS-SA-2026-3670)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This...

openSUSE 16: librpmbuild10 / python313-rpm / rpm / rpm-build / rpm-devel / etc (openSUSE-SU-2026:21856-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21856-1 advisory. Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: rpm-plugin-selinux if selinux-policy - harden...

EulerOS Virtualization 2.12.1 : rpm (EulerOS-SA-2026-3616)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: UnionTech-rpm-installer (UTSA-2026-110878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110878 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.1-0.5.hum1 aarch64, x8664 grafana13.2-13.2.1-0.5.hum1.src src Security Fixes: grafana13.2: CVE-2026-81871...