Fedora 45 : mingw-expat (2026-9e9244744d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9e9244744d advisory. Update to expat-2.8.4. ---- Update to expat-2.8.3. Tenable has extracted the preceding description block directly from the Fedora security advisory...

RHEL 10 : gstreamer1-plugins-base (RHSA-2026:66460)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66460 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

Linux Distros Unpatched Vulnerability : CVE-2026-45761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a...

Debian dsa-6494 : kamailio - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6494 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6494-1 [email protected] https://www.debian.org/securit...

Fedora 45 : firefox / nss (2026-823e097aaa)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-823e097aaa advisory. NSS Release Notes Update NSS to 3.127.0 - Bug 1869493 - Heap-buffer overflow in AES Keywrap. - Bug 2052210 - Generate additional test message for...

Linux Distros Unpatched Vulnerability : CVE-2026-57227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to uncontrolled resource consumption within the DNS parser logic. The system struggles to process anomalous, looping compressed...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107273 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dcstate NULL check in dcstaterelease How Check wheather state is NULL befo...

Oracle Linux 8 : ELSA-2026-66451-0: / glib2 (ELSA-2026-664510)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664510 advisory. 2.56.4-178 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing Tenable has extracted the preceding description block directly from the Oracle...

RockyLinux 8 : glib2 (RLSA-2026:66451)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66451 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block directly...

Fedora 45 : bluez (2026-84b4f1c43a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84b4f1c43a advisory. BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP X...

ADC-19781

ADC-19781 Varias comprobaciones para CVE-2019-19781 Instalación del módulo Descargue los dos archivos ADC-19781.psd1 y ADC-19781.psm1 y colóquelos en una de las siguientes ubicaciones: C:\Users%USERNAME%\Documents\WindowsPowerShell\Modules\ADC-19781 C:\Program...

frevvomapexec

frevvomapexec frevvomapexec es un script para verificar la existencia de una vulnerabilidad de inyección SQL ciega mediante la inyección de un retardo de tu elección en segundos en Square 9 GlobalForms 6.2. Para verificar que la vulnerabilidad es legítima, se le pedirá al usuario final que realic...

CVE-2022-26726-POC

CVE-2022-26726 Versiones afectadas Como estudiante, tengo acceso limitado a dispositivos en los que puedo probar esta vulnerabilidad. Las versiones que he probado hasta ahora son MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7 y MacOS 11.6.1. La vulnerabilidad funciona en todas las versiones...

exchange_webshell_detection

Este proyecto ha sido descontinuado Por favor, use las herramientas de Microsoft en su lugar: Microsoft Safety Scanner Otras detecciones y mitigaciones listadas en: https://github.com/microsoft/CSS-Exchange/tree/main/Security Al evaluar el impacto, sugerimos encarecidamente asumir una brecha y...

CVE-2021-34527_ACL_mitigation

CVE-2021-34527mitigation Mitigación para CVE-2021-34527 RCE mediante el establecimiento de ACL de escritura. Estos scripts sirven tanto para agregar como para eliminar las mitigaciones de ACL para CVE-2021-34527 PrintNightmare que escribí con la ayuda de /u/AforAnonymous del hilo de reddit de...

bluekeep_CVE-2019-0708_poc_to_exploit

Nota: Este proyecto ha sido archivado ya que se han desarrollado exploits reales en otros lugares con mejor éxito. https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/ Insignias bluekeepCVE-2019-0708poctoexploit Portando el PoC de BlueKeep de @Ekultek &...

CVE-2021-22986_Check

CVE-2021-22986Check CVE-2021-22986 Script de Verificación en Python3 Cómo usar: python3 checker.py -u http://url Salida: root@kitploit: HOST IS NOT VULNERABLE: | | | / | | | | | | | | | | | | | | | | \ \ | ' | |/ | | | | | | | | | | | | | || |/ |/| ./||/||| | | || Vuln Checker ! Target:...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution RCE and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit...

CVE-2021-22893_HoneyPoC2

CVE-2021-22893 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. DO NOT RUN THIS. Usage Achieves RCE on Pulse Secure VPNs root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.s...

React2P4IM0Nshell

React2P4IM0Nshell 💥Extension Tool for Advanced RCE/Source Leak/Dos CVE-2025-55182/83/84 Auditing and Exploitation for Next.js and React Server Components RSC environments directly from your browser, with built-in linux terminal in the extension to receive any reverse shell ❌ ⚡ CMDCENTER: The Core...