Linux Distros Unpatched Vulnerability : CVE-2026-74702

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array...

Linux Distros Unpatched Vulnerability : CVE-2026-68766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and...

PT-2026-79529

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 2.2.01b05 Description A stack-based buffer overflow exists in the NTP Timezone Configuration Handler within the uci safe get function of the /cgi-bin/apply time.cgi endpoint. This issue occurs because the function...

Linux Distros Unpatched Vulnerability : CVE-2026-74655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted ...

PT-2026-79699

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI CMD SEND CMD payload length ncsi send cmd nl takes the number of bytes to copy from the attacker-controlled ncsi pkt hdr.length field of the in-band packet header, while the source buffer is th...

PT-2026-79660

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uart ops does not provide a flush buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-74694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length fiel...

gopher47

gopher47 A third-party Gopher Assassin for the Havoc Framework it's like the videogame :D What is This? 🤔 This is a 3rd Party agent for the Havoc C2 written in Golang, mainly written as a learning project, but I'm sure it's still useful. By the time this is out, you can read more about what and w...

amd-ryzen-master-driver-v17-exploit

Cobalt Strike Beacon Object File for kernel exploitation using AMD's Ryzen Master Driver version 17. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF and executable which exploits AMD's Ryzen Master...

kavanoz

🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation root@kitploit: pip install kavanoz To install from sourc...

SharpC2

SharpC2 SharpC2 is a Command & Control C2 framework written in C. It consists of an ASP.NET Core Team Server, a .NET Framework implant, and a .NET MAUI client...

czds

CZDS What is CZDS? Each Top Level Domain TLD is maintained by a registry operator, who also manages a publicly available list of Second Level Domains SLDs and the details needed to resolve those domain names to Internet Protocol IP addresses. The registry operator’s zone data contains the mapping...

pyOneNote

pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development root@kitploit: pip install -U...

RasmanPotato

RasmanPotato Thanks to @Wh04m1001 for continuous communication over time Just another potato like other potatoes, using RasMan service for privilege escalation For Windows 1011 not test, Windows Server 2012 - 20192022 not test Usage root@kitploit: magicRasMan v0.1 Provided that the current user h...

wordlist.rb

Wordlist Source Issues Documentation Description Wordlist is a Ruby library and CLI for reading, combining, mutating, and building wordlists, efficiently. Features Supports reading .txt wordlists, and .gz, .bz2, .xz, .zip, and .7z compressed wordlists. Supports building wordlists from arbitrary...

CVE-2026-53541

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

intentshield v1.3.0

IntentShield Don't filter what your AI says. Filter what it's about to do Pre-execution intent verification for AI agents. Why This Exists AI agents have tool access. They can execute shell commands, write files, browse URLs, send emails, and call APIs. Every one of those actions is a potential...

CVE-2026-53541 OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-53541 OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-53541

OliveTin , a web interface for executing predefined shell commands, is vulnerable to improper input validation in its executor. The filterToDefinedArgumentsOnly function in service/internal/executor/executor.go contains a special case that allows any user-supplied argument prefixed with ot_ to by...