bissap

bissap root@kitploit: %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

domestic-system

Il Sistema Domestico Un wallet Ethereum bello, basato su terminale e browser di smart contract costruito per sovranità, sicurezza e stile. root@kitploit: ━━━━━━━━━━━━━━━━━━━━ domestic system ━━━━━━━━━━━━━━━━━━━━ Panoramica Il Sistema Domestico è un'interfaccia utente a terminale TUI progettata pe...

NotaMy

🇬🇧 Englisch| 🇮🇹 Italienisch ---|--- 🧠 NotaMy NotaMy ist ein hierarchischer, terminalbasierter technischer Notizmanager, der darauf ausgelegt ist, die mentalen Kosten von Kontextwechseln für Personen zu senken, die an langfristigen Analyseaufgaben arbeiten Pentesting, Reverse Engineering, Wargames...

CVE-2026-39987

CVE-2026-39987 — Marimo RCE pre-autenticazione /terminal/ws root@kitploit: CVSS 4.0 : 9.3 CRITICAL CVSS 3.x : 9.8 CRITICAL CWE : CWE-306 Missing Authentication for Critical Function Fix : Marimo 0.23.0+ Affects : Marimo Solo laboratorio / test autorizzati HTB, CTF, engagement con scope scritto...

CVE-2026-39987

CVE-2026-39987 - Bypass dell'autenticazione WebSocket del terminale marimo poc Panoramica Questo repository contiene CVE-2026-39987 che interessa le versioni di marimo precedenti alla 0.23.0. La vulnerabilità è presente nell'endpoint WebSocket del terminale, dove un'applicazione insufficiente...

ai-email-threat-research

Threat Terminal Ein Cybersicherheits-Forschungsspiel, das misst, wie Menschen KI-generierte Phishing-E-Mails erkennen. Entwickelt als Retro-Terminal-Erlebnis. Live-Demo: research.scottaltiparmak.com Das Problem KI kann heute Phishing-E-Mails mit perfekter Grammatik, fehlerfreier Rechtschreibung u...

CVE-2026-74676

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

AZL-97235 CVE-2026-74675 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...

CVE-2026-74675

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...

EUVD-2026-64363

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

CVE-2026-74676

CVE-2026-74676 affects the Linux kernel virtual terminal (VT) subsystem. The KDSKBMETA ioctl, which modifies keyboard meta mode, lacked the !perm permission check enforced by all other keyboard setter ioctls in vt_k_ioctl() . This allowed a process to change the meta mode on a non-controlling con...

CVE-2026-74675 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...

CVE-2026-74675 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...

CVE-2026-74675

A race condition in the Linux kernel's virtual terminal (vt) subsystem affects the kbd_keycode() function, which reads vc->port.tty without acquiring a proper tty reference. This races against con_shutdown(), which clears port.tty under a different lock, potentially leading to a use-after-free...

EUVD-2026-64362

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...

PT-2026-79681

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt k ioctl enforce, allowing a process to change meta mode on a non-controlling...

EUVD-2026-64139

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/iostream.go to their creating user, and GET /ws/terminal/:id and GET...

SUSE CVE-2026-65611

nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...

PT-2026-79458

Name of the Vulnerable Software and Affected Versions Nezha Monitoring versions 1.14.13 through 1.14.14 Nezha Monitoring versions 2.0.0 through 2.0.9 Description Nezha Monitoring fails to bind stream identifiers created by the CreateStream function in service/rpc/io stream.go to the user who...

Linux Distros Unpatched Vulnerability : CVE-2026-72847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call...