Exploit for CVE-2026-73310

CVE-2026-73310 XenForo before 2.3.13 does not bind an OAuth2...

Exploit for CVE-2026-73309

CVE-2026-73309 XenForo before 2.3.13 can skip OAuth2 client-s...

SUSE-SU-2026:4093-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

Security update for multipath-tools

This update for multipath-tools fixes the following issues: Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. Path traversal in device-mapper-multipath failedwwids management bsc1277210. SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows bsc127721...

CVE-2026-41179

CVE-2026-41179 — rclone RC API 未授权远程代码执行 ⚠️ 仅供教育用途 本仓库严格用于安全研究、教育和经授权的实验环境。PSSec 及本仓库的贡献者不纵容、支持或承担因使用此处信息、代码或技术而导致的任何未经授权、非法或恶意用途的责任。使用本仓库即表示您同意自行承担所有责任，并且仅会针对您拥有或已获得明确书面许可的系统进行测试。 概述 CVE-2026-41179 是 rclone 内置远程控制（RC）API 中的一个严重未授权远程代码执行（RCE）漏洞，影响版本 1.48.0 至 1.73.4 。 工作原理 rclone 自带一个内置的 HTTP...

CVE-2026-86730

Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers. Attackers can post field-layout tab elements as JSON strings to bypass cleanse validation, then trigger...

fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier URI hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policie...

cargo-perm

描述 在 cargo 版本 1.7.0 中发现了一个新漏洞，详情请见此处。 逐步操作 首先，你需要确认你的 cargo 版本是否存在此漏洞。 cargo --version 假设我有一个 cargo 项目，其 src/main.rs 文件如下： root@kitploit: use numbigint::BigInt; use std::str::FromStr; // 无聊的猜数字游戏 fn main let secretnumber = BigInt::fromstr"123456789"; loop println!"猜一个数字："; let mut guess =...

cve-2020-10977-read-and-execute

CVE-2020-10977 leer y ejecutar Acerca de CVE-2020-10977 Informe de HackerOne: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 Cómo reproducir la parte de ejecución manualmente: De la lectura a la ejecución Acerca de este repositorio getsecret.py - script...

CVE-2022-1388

F5-CVE-2022-1388-Exploit Exploit y Script de Verificación para CVE 2022-1388 Uso root@kitploit: bash / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /|...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 由我发现的漏洞 CVE-2019-15053 公告：advisory.txt 基本信息 root@kitploit: Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested Versions....: 1.4.2...

mi-laboratorio-log4shell

🚀 Laboratorio Automatizado Log4Shell CVE-2021-44228 Plug & Play Un laboratorio de investigación de seguridad automatizado, de un solo comando, diseñado para demostrar y auditar la vulnerabilidad de Ejecución Remota de Código Log4Shell CVE-2021-44228. Este proyecto consolida todos los componentes...

Exploit for Use After Free in Mozilla Firefox

CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457...

dnsmasq-cve-2026

dnsmasq CVE-2026 QA 验证工具 自动化黑盒工具，用于验证 6 个 dnsmasq 漏洞（2026 年 5 月）。向在线 DUT 发送攻击数据包并报告 PASS/FAIL —— 无需访问源代码。 快速开始 root@kitploit: Set DUT DNS to your laptop's WAN IP via GUI first, then: sudo python3 dnsmasqcveverify.py --laptop --dut --dut-pass Example: sudo python3 dnsmasqcveverify.py --laptop...

CVE-2026-20182

CVE-2026-20182 Omisión de autenticación de peering en Cisco Catalyst SD-WAN CVE-2026-20182 — Omisión de autenticación de peering en Cisco Catalyst SD-WAN Herramienta de evaluación para pruebas autorizadas de la omisión de autenticación de peering en Cisco Catalyst SD-WAN Controller / Manager...

Codify-TJNULL-OSCP-

Hack The Box — Writeup de Codify Guía completa de pruebas de penetración y writeup para la máquina Codify en Hack The Box. 📌 Información de la Máquina Campo| Valor ---|--- Nombre| Codify SO| Linux Dificultad| Fácil Conceptos Clave| vm2 RCE CVE-2023-30547, Enumeración de BD SQLite, Cracking de...

OPENSUSE-SU-2026:21810-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...

OPENSUSE-SU-2026:21811-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

cve-2022-36804

CVE-2022-36804 Bitbucket PoC This repository contains a Python exploit script for Atlassian Bitbucket Server/Data Center vulnerability CVE-2022-36804. The issue is a command-injection flaw in the Git archive flow, where crafted prefix parameters can be interpreted by the server and executed as...