BetterBackdoor

BetterBackdoor Une porte dérobée backdoor est un outil utilisé pour obtenir un accès distant à une machine. En général, les utilitaires de porte dérobée comme NetCat ont deux fonctions principales : rediriger l’entrée distante vers cmd ou bash et renvoyer la réponse. C’est utile, mais aussi limit...

SSCMS-PluginShell

Installer Visual Studio 2. Importer le projet 3. Modifier la valeur de IPAddress.Parse dans le fichier Startup.cs root@kitploit: using Microsoft.Extensions.DependencyInjection; using SSCMS.Advertisement.Abstractions; using SSCMS.Advertisement.Core; using SSCMS.Plugins; using System.Diagnostics;...

BlueBorn

BlueBorn CVE-2017-0785 Установка в Archlinux root@kitploit: paru -S python-pybluez-git bluez-utils-compat pyhton3 python3-pip sudo pip install pwn РУКОВОДСТВА Обнаружение root@kitploit: hcitool scan Scanning ... XX:XX:XX:XX:XX:XX Device 1 XX:XX:XX:XX:XX:XX Device 2 Использование эксплойта...

CVE-2026-17350

Summary: CVE-2026-17350 affects pgAdmin 4 in SERVER mode (9.3–9.17). The per-tool permission system did not consistently enforce tool-level permissions; only the front-door route used a permissions_required decorator, while other backend routes and Socket.IO handlers relied on authentication chec...

dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...

PYSEC-2026-2697 Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access Affected Component Socket.IO session state and role-check callsites: - backend/openwebui/socket/main.py lines 330-351, connect handler — role snapshotted into SESSIONPOOL - backend/openwebui/socket/main.py lin...

MAL-2026-4400 Malicious code in @kmmao/happy-coder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4478b22a21a87a37250e86ef25639330f79b779e5793f642eaf7ddaafd975d4 This package is a near-verbatim fork of the upstream happy-coder/happy-cli references to slopus/happy-cli and happy.engineering are retained througho...

CVE-2026-42095

bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...

CVE-2026-42095

bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...

CVE-2026-25947

Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocatio...

EUVD-2018-20388

Malware in sbrugna...

EUVD-2003-0785

Malware in sbrugna...

EUVD-2020-12556

Malware in sbrugna...

EUVD-2007-1537

Malware in sbrugna...

EUVD-2022-35332

Malicious code in bioql PyPI...

EUVD-2022-54755

Malicious code in bioql PyPI...

EUVD-2022-5389

Malicious code in bioql PyPI...

EUVD-2024-0876

Malicious code in bioql PyPI...

CVE-2022-49474 Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling scoconn and use-after-free in scosocktimeout Connecting the same socket twice consecutively in scosockconnect could lead to a race condition where two scoconn objects are created but only one is associated...

CVE-2022-49474

CVE-2022-49474 (Linux kernel) affects the Bluetooth SCO path. The issue arises when connecting the same SCO socket twice (sco_sock_connect), which can create two sco_conn objects but only one is bound to the socket. If the socket closes before the SCO connection is established, the timer for the ...