aad-bofs

Este repositorio contiene una colección de BOFs para diversos ataques a Azure AD. Todos los BOFs han sido probados en batalla durante compromisos. Siéntete libre de contribuir también :...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wilc1000 – fixed a potential memory leak in wilcmacxmit The wilcmacxmit function returns NETDEVTXOK without freeing the skb buffer; devkfreeskb was added to fix this issue. This fix has been tested only during compilation...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

CVE-PoC-Hub

🔬 CVE-PoC-Hub — 精选概念验证漏洞利用 针对近期 CVE 的可运行、已验证的 PoC 脚本。已在实验室环境中测试。 适用于安全研究人员、渗透测试人员和 CTF 玩家。 ⚠️ 免责声明 所有 PoC 仅用于教育和授权测试。 每个漏洞利用均已在隔离的实验室环境中测试。 未经明确许可，请勿对任何系统使用。 📂 仓库结构 root@kitploit: CVE-PoC-Hub/ ├── README.md ├── CVE-2026-XXXXX/ 每个 CVE 拥有独立文件夹 │ ├── README.md 描述 + 步骤 │ ├── exploit.py 可运行的 PoC │ └──...

Exploits

Exploits de Windows Un archivo seleccionado de exploits públicos de Windows compilados y probados...

yararules

yararules Yara rulez; reglas también. Este es un repositorio de mis propias reglas YARA agrupadas junto con reglas YARA disponibles públicamente, recopiladas de fuentes abiertas, pulidas y probadas por mí. Contacto: craiu at protonmail.ch...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

CVE-2026-71644

RACER by Robotics-STAR-Lab (SYSU STAR Group) is vulnerable to unsafe trajectory planning and potential UAV collisions when affected. The root cause is a missing default case in the Finite State Machine (FSM) that stops publishing swarm trajectories when a drone enters the IDLE state, allowing a r...

EUVD-2026-76195

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback in swarmexploration/explorationmanager/src/fastexplorationfsm.cpp...

CVE-2026-71646

A denial of service vulnerability exists in RACER (Robotics-STAR-Lab, SYSU STAR Group), specifically in the FastExplorationFSM::optTimerCallback() function within swarm_exploration/exploration_manager/src/fast_exploration_fsm.cpp. The affected version is commit abcdef1234567890. A remote attacker...

CVE-2026-71645

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vmci: Speculation leaks were prevented by sanitizing the event in eventdeliver. Coverity identified that eventmsg is controlled by user-space. eventmsg-eventdata.event is passed to eventdeliver and used as an index without proper...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-sysman: Fixed reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned. This means that we need to dispose of the duplicate attribute accordingly. Use...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: platform/x86: think-lmi: Fixed reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned, and this reference needs to be disposed of using kobjectput. The validation of the...

EUVD-2026-49766

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and...

📄 MCPJam Inspector 1.4.2 Remote Code Execution

MCPJam Inspector versions 1.4.2 and below remote code execution proof of concept exploit. Exploit Title: MCPJam Inspector - Remote Code Execution Date: 07/03/2026 Exploit Author: Diamorphine Vendor Homepage: https://www.mcpjam.com/ Software Link: https://github.com/MCPJam Version: &...

CVE-2026-49319 Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: A memory leak was fixed in amdgpurasinit. When amdgpunbiorasswinit fails in amdgpurasinit, the function returns directly without freeing the allocated con structure, resulting in a memory leak. This issue was fixed by...

Slackware Linux 15.0 / current openssl Multiple Vulnerabilities (SSA:2026-168-05)

The version of openssl installed on the remote host is prior to 1.1.1zh / 3.5.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-168-05 advisory. New openssl packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted t...

FreeBSD : caddy -- multiple vulnerabilities (94f93681-6775-11f1-8044-002590af0794)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 94f93681-6775-11f1-8044-002590af0794 advisory. Caddy project reports: Caddy 2.11.4 contains multiple security fixes. GitHub Security Advisory...