PT-2026-88512

Impact The Git node's clone operation matched the destination path against the default N8N BLOCK FILE PATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...

MSMQ-Vulnerability

MSMQ 安全实验室 该仓库记录了关于 Microsoft 消息队列安全暴露的受控实验室审查，重点关注防御性验证、检测证据和修复规划。 该项目定位为作品集工件：展示如何将漏洞研究转化为证据收集、检测工程、缓解规划和验证。 项目目的 本项目的目的是记录一个作品集安全实验室，将漏洞研究与实际防御工作联系起来。 范围 本仓库关注： 实验室环境说明 MSMQ 服务暴露审查 网络抓包证据 Windows 事件查看器观察结果 Snort 和 Suricata 检测示例 缓解与补丁验证清单 截图和日志的证据索引 仓库结构 root@kitploit: MSMQ-Vulnerability/ ├──...

cve-2022-29117-assessment

cve-2022-29117-assessment CVE-2022-29117（.NET Cookie 处理拒绝服务）评估、理解与问题框架...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- 的 Poc 使用方法： 1-按下分享按钮并截图 2-通过 ftp 进入路径：/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ 你会找到刚才截的图。 3-将其复制到电脑上，用 makepng.py 运行它，会输出 poc.png 4-将其重命名为截图的名字，然后通过 ftp 放回同一路径 5-尝试在图库中打开它，会显示错误...

CVE-2020-10558

CVE-2020-10558: Denegación de Servicio DoS en Tesla Model S/3/X Investigador de seguridad: Jacob Archuleta @nullze 📝 Resumen de la vulnerabilidad Se descubrió una vulnerabilidad crítica de Denegación de Servicio DoS en los Tesla Model 3, Model S y Model X todas las versiones anteriores a 2020.4.1...

cve-2015-5477

PoC para el DoS por aserción TKEY de BIND9 CVE-2015-5477 Este exploit comprueba si un servidor BIND9 es vulnerable enviando el exploit para ver si se bloquea. Es código C que se compila de la forma habitual en Unix/Windows, por ejemplo: root@kitploit: gcc tkill.c -o tkill Funcionará tanto sobre...

http2-bomb

HTTP/2 Bomb - CVE-2026-49975 Una prueba de concepto de denegación de servicio DoS dirigida a servidores HTTP/2. Al combinar la amplificación HPACK con la retención de flujos, una única máquina con una conexión de red modesta puede dejar un servidor vulnerable no disponible en cuestión de segundos...

CVE-2026-59310

CVE-2026-59310 More root@kitploit: echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 root@kitploit: GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2022-0778

CVE-2022-0778 説明 drago-96 のコンセプトを参考に、P12およびPEM形式に基づいてPoCを書き直しました。これを使用してCVE-2022-0778の脆弱性（つまり、危険なSSL証明書、秘密パスワードなしで空のまま）を検証できます。影響を受けるデバイスでは、プロセスのCPU使用率が100%になったり、再起動が発生する可能性があります。 クレジット https://github.com/drago-96/CVE-2022-0778 https://twitter.com/taviso https://github.com/wllm-rbnt/asn1template...

CVE-2026-16028 Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...

CVE-2026-57239

Foxit PDF Reader LPE Foxit PDF Readerのアップデーターサービスを介してNT AUTHORITY\SYSTEM権限を取得できる、CVE-2026-3775/CVE-2026-3780およびCVE-2026-57239の概念実証エクスプロイトです。 ビルド バイナリをビルドし、ターゲットに配置して実行するだけです。 root@kitploit: cargo build --release 使い方 このプログラムには3つの主要エントリーポイントがあります:...

[SECURITY] [DSA 6488-1] jbig2dec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 07, 2026 https://www.debian.org/security/faq -...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

JetBrains Hub prior to version 2026.2.52442 is affected by a privilege escalation vulnerability. An unauthenticated attacker over the network could register a trusted service and subsequently gain superuser privileges , resulting in full compromise of confidentiality, integrity, and availability ...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

EUVD-2026-72496

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

[SECURITY] [DSA 6487-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 06, 2026 https://www.debian.org/security/faq -...

MAL-2026-16039 Malicious code in service-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in service-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...