GTScan

GTScan 专为电信领域设计的Nmap扫描器。随着当前对电信安全的关注，日常IT侧渗透测试中使用的工具也应扩展到电信领域。这便是开发一款类似于Nmap但针对电信网络的扫描器的初衷。 当前的安全互联安全控制措施可能无法抵御情报收集，尽管移动运营商可能部署了短信防火墙/代理、互联防火墙，但其中部分措施仍会泄露可用于进一步信息收集过程的信息。 本项目的动机：首先，为电信渗透测试人员的武器库增添新工具；其次，让移动运营商能够通过信息收集和情报侦察这类基础方法论来测试其安全控制措施的有效性。 工作原理 GTScan 利用空的 TCAP...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

Remoto root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...

SECURITY-218

Questa mitigazione è obsoleta a partire da Jenkins 2.54 e Jenkins LTS 2.46.2. Se hai installato una versione 2.54+/LTS 2.46.2+ di Jenkins, la CLI basata su Remoting è disabilitata per impostazione predefinita. Se hai installato una versione precedente di Jenkins e hai effettuato l'aggiornamento a...

copy-fail-mcp

Copy Fail MCP 📖 Guida all'installazione — avvio rapido, configurazione manuale e risoluzione dei problemi CVE-2026-31431 — La peggiore vulnerabilità Linux mai scoperta. Ora controllabile tramite MCP. 732 byte di Python. Nessuna compilazione. Nessuna race condition. Nessun offset per distro. Un...

DirtyFrag-go

dirtyfrag-go दो बग। एक शेल। कोई डिस्क राइट नहीं। dirtyfrag का Go पोर्ट CVE-2026-43284 / CVE-2026-43500। यह कैसे काम करता है tl;dr यह बग Linux कर्नेल XFRM सबसिस्टम में है। जब किसी फ़ाइल पेज को splice करके एक पाइप में और फिर एक ESP-एन्क्रिप्टेड सॉकेट में डाला जाता है, तो कर्नेल ESP पेलोड को इन-प्ले...

CVE-2023-21817

CVE-2023-21817 - Verificatore di vulnerabilità LPE di Windows Kerberos Un Proof of Concept PoC / Verificatore di vulnerabilità minimalista in C++ per CVE-2023-21817. Questa utility aiuta ricercatori di sicurezza e amministratori di sistema a determinare se un sistema Windows è vulnerabile alla...

CVE-2024-36971

CVE-2024-36971 — Proof of Concept Solo Ricerca e Analisi ⚠️ DICHIARAZIONE DI NON RESPONSABILITÀ — LEGGERE PRIMA DI UTILIZZARE QUESTO REPOSITORY Questo repository è destinato esclusivamente a ricerca difensiva, analisi e segnalazione responsabile. Contiene un file proof of concept non sfruttabile...

CVE-2026-80684

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

CVE-2026-80690

CVE-2026-80690 affects the Linux kernel UFS (Universal Flash Storage) SCSI driver. The root cause is that the hba->rpmbs list is not initialized in ufshcd_alloc_host(), leading to a NULL pointer dereference in the device teardown path when ufs_rpmb_probe() fails. The fix is a list initializati...

CVE-2026-80662

CVE-2026-80662 affects the CXL subsystem in the Linux kernel . The root cause is that CXL_HEADERLOG_SIZE was defined as SZ_512 (512 bytes), eight times the actual 64-byte on-device Header Log size in the CXL r4.0 RAS Capability Structure. This caused header_log_copy() to overread the 88-byte ioma...

CVE-2026-80624

CVE-2026-80624 affects the Linux kernel 's mfd: cs42l43 driver. The root cause is a missing sanity check: the code verifies that a firmware was received but does not confirm that the firmware size exceeds the firmware header size. Because the firmware pointer is dereferenced as a pointer to the h...

EUVD-2026-67481

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

CVE-2026-80602

CVE-2026-80602 is an information disclosure vulnerability in the Linux kernel 's perf/x86/amd/lbr subsystem. On AMD processors supporting X86_FEATURE_AMD_LBR_V2 , the hardware branch filter only validates the privilege level of the branch target , not the branch from address. As a result, SYSRET/...

EUVD-2026-67476

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

cve-2019-2215

CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215 Based on a proof-of-concept by Jann Horn & Maddie Stone of Google Project Zero Overview Demonstration of a kernel memory R/W-only privilege escalation attack resulting in a temporary root shell. It works on Google Pixel 2/Pixel 2...

CVE-2013-6282

COSTRUZIONE: Scarica l'android ndk, ad esempio: https://dl.google.com/android/repository/android-ndk-r10e-linux-x8664.zip Ho usato android-ndk-10d Decomprimilo e installalo, assicurati che ndk-build sia nel tuo PATH root@kitploit: $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk...

d-os-descriptor

d-os-descriptor Sommario Il sottosistema USB Gadget include problemi di sicurezza nella sezione di gestione dei descrittori OS della funzione compositesetup composite.c. L'elaborazione di messaggi di richiesta di trasferimento di controllo opportunamente costruiti provoca il crash del dispositivo...

CVE-2025-20352

CVE-2025-20352 Controllo dell'esposizione SNMP onesixtyone + parser Verifica rapida e sicura dell'esposizione black-box dei dispositivi Cisco IOS/IOS XE legata a CVE-2025-20352 sottosistema SNMP: 1. Scansiona le tue sottoreti per SNMP usando onesixtyone con le community predefinite. 2. Analizza i...

optee-qemu

CVE-2021-44733: Fuzzing e sfruttamento di una use-after-free nel sottosistema TEE del kernel Linux Recentemente è stata scoperta una vulnerabilità use-after-free nel sottosistema TEE del kernel Linux, fino alla versione 5.15.11 inclusa, alla quale è stato assegnato l'ID CVE-2021-44733 1. A prima...

CVE-2026-80589

A flaw was found in the Linux kernel's block subsystem. This vulnerability occurs when a disk's initialization fails before it is fully integrated, causing a critical timer to remain active even after the associated memory is released. This improper handling of memory can lead to a use-after-free...