CVE-2025-63408

...

CVE-2024-23722-poc

CVE-2024-23722-poc Использование root@kitploit: python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently no...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Remarques : La question « curseur » peut également être vulnérable avec un grand entier au lieu d'une chaîne de caractères. Cela n'a pas pu être confirmé dans mon environnement local. Étapes d'exploitation Ouvrez la page du sondage et trouvez un champ de texte ou d...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Divulgation de sécurité : lecture hors limites dans l'analyseur MIME de facil.io entraînant le crash du serveur Identifiant CVE attribué CVE-2026-66729 Produit : facil.io Versions concernées : facil.io = 0.6.0 toutes les 0.6.x, toutes les 0.7.x, master ; introduit lors de l'ajout de l'analyseur...

CVE-2026-23918

CVE-2026-23918 Détecteur de double libération Apache modhttp2 https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 root@kitploit: python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT...

GHSA-RVF3-5QRX-MRJ3 vulnerabilities

Vulnerabilities for packages: freeipa...

CVE-2026-31402

🛡️ CVE-2026-31402 – Dépassement de tas du cache de rejeu des verrous NFSv4 CVE-2026-31402 : un bug NFS Linux caché pendant 23 ans 📌 Vue d'ensemble CVE-2026-31402 est une vulnérabilité de dépassement de tas heap overflow dans le cache de rejeu des verrous NFSv4.0 du noyau Linux. Elle provient d'une...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Avis de sécurité : une recherche de salon non contrôlée entraîne le crash du serveur Let's Chat Identifiant CVE attribué : CVE-2026-66749 Résumé Une seule requête HTTP provenant de n'importe quel compte connecté arrête le processus du serveur Let's Chat. GET /messages prend un paramètre room,...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit Ключевые особенности этого эксплойта типа «черный ящик»: 1. Перебор учетных данных: Проверяет 12+ стандартных комбинаций имени пользователя и пароля Проверяет 5 общих системных баз данных Автоматически определяет действительные учетные данные 2. Попытка анонимного доступа:...

cve-2015-5477

PoC pour BOND9 TKEY assert DoS CVE-2015-5477 Cet exploit teste si un serveur BIND9 est vulnérable en envoyant l'exploit afin de voir s'il plante. C'est du code C que vous compilez de la manière habituelle sur Unix/Window, par exemple : root@kitploit: gcc tkill.c -o tkill Il s'exécutera sur IPv4 e...

Linux Distros Unpatched Vulnerability : CVE-2026-18706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause ...

EUVD-2026-67872

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-56684

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

Astra Linux – Vulnerability in isc-dhcp

In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP e.g., releases in the 4.0.x series or earlier, and releases in the 4.3.x series are beyond their End-of-Life period and are no longer supported by ISC. It is clear that this defect is also present in releases...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. Versions 8.2.1 and earlier allow an authenticated user to use a specially crafted Lua script to read out-of-bounds data or cause the server to crash, resulting in a denial of service attack. This vulnerability exists in all...

Astra Linux – Vulnerability in rabbitMQ-server

Pivotal RabbitMQ versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, as well as RabbitMQ for Pivotal Platform versions 1.16.x prior to 1.16.7 and 1.17.x prior to 1.17.4, contain a web management plugin that is vulnerable to a denial-of-service attack. The “X-Reason” HTTP header can be...

Astra Linux – Vulnerability in Apache2

A NULL pointer dereference in moddavlock in the Apache HTTP Server 2.4.66 and earlier versions may allow an attacker to crash the server with a malicious request. moddavlock is not used internally by moddav or moddavfs. The only known use-case for moddavlock was in moddavsvn from Apache Subversio...