climber

Climber Herramienta de auditoría automatizada para verificar configuraciones incorrectas en sistemas UNIX/Linux que pueden permitir la escalada local de privilegios. Dependencias python = 2.7 python-crypto python-mako python-paramiko Nota Climber necesita Exscript, un módulo de Python y un...

[SECURITY] Fedora 44 Update: emacs-30.2-27.fc44

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor...

ALPINE-CVE-2026-24131

pnpm is a package manager. Prior to version 10.28.2, when pnpm processes a package's directories.bin field, it uses path.join without validating the result stays within the package root. A malicious npm package can specify "directories": "bin": "../../../../tmp" to escape the package directory,...

CVE-2026-24131: Improper Limitation of a Pathname to a Restricted Directory

pnpm is a package manager. Prior to version 10.28.2, when pnpm processes a package's directories.bin field, it uses path.join without validating the result stays within the package root. A malicious npm package can specify "directories": "bin": "../../../../tmp" to escape the package directory,...

CMD Base64 Encoder

Encodes command-line payloads in base64 to avoid bad characters. Supports Unix/Linux shells with multiple decoding methods. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 class ModuleEncoder: info = "name": "CMD Base64 Encoder", "description": "Encodes command-lin...

CVE-2024-47118

The CVE-2024-47118 entry concerns IBM Db2 (and Db2 Connect Server) on Linux/Unix/Windows susceptible to a denial of service where a server may crash under certain conditions from a specially crafted query. The IBM-connected bulletin details the vulnerability under CWE-121 (Stack-based Buffer Over...

CVE-2025-39895

In the Linux kernel, the following vulnerability has been resolved: sched: Fix schednumafindnthcpu if mask offline schednumafindnthcpu uses a bsearch to look for the 'closest' CPU in scheddomainsnumamasks and given cpus mask. However they might not intersect if all CPUs in the cpus mask are...

Update Rollup 3 for System Center 2022 Operations Manager

Update Rollup 3 for System Center 2022 Operations Manager Applies To System Center 2022 Operations Manager Introduction This article describes the new features and issues that are fixed in System Center Operations Manager 2022 Update Rollup 3. This article also contains the installation...

RLSA-2024:4265 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: Cupsd Listen arbitrary chmod 0140777 CVE-2024-35235 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

Update Rollup 6 for System Center 2019 Operations Manager

Update Rollup 6 for System Center 2019 Operations Manager Applies To System Center 2019 Operations Manager Applies to: System Center 2019 Operations Manager Introduction This article describes the new features and issues that are fixed in System Center Operations Manager 2019 Update Rollup 6. Thi...

Craft CMS Twig Template Injection RCE via FTP Templates Path

This module exploits a Twig template injection vulnerability in Craft CMS by abusing the --templatesPath argument. The vulnerability allows arbitrary template loading via FTP, leading to Remote Code Execution RCE. Module Options msf use exploit/linux/http/craftcms/ftptemplate msf...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-03029)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

Update Rollup 2 for System Center 2022 Operations Manager

Update Rollup 2 for System Center 2022 Operations Manager Applies To System Center 2022 Operations Manager Applies to : System Center 2022 Operations Manager Introduction This article describes the new features and issues that are fixed in System Center Operations Manager 2022 Update Rollup 2. Th...

IBM DB2 security vulnerabilities

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2 version 11.1 and 11.5, which can be exploited ...

RaspAP 2.8.7 Unauthenticated Command Injection Exploit

RaspAP is feature-rich wireless router software that just works on many popular Debian-based devices, including the Raspberry Pi. A Command Injection vulnerability in RaspAP versions 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands in the context of the user running...

IBM DB2 security vulnerabilities

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to caus...

Security Updates for Microsoft System Center Management Pack (June 2022)

The Microsoft System Center Management Pack for UNIX/Linux on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-29149 Note that Ness...

Microsoft OMI Management Interface Authentication Bypass Exploit

By removing the authentication header, an attacker can issue an HTTP request to the OMI management endpoint that will cause it to execute an operating system command as the root user. This vulnerability was patched in OMI version 1.6.8-1 released September 8th 2021. This module requires Metasploi...

Fedora: Security Advisory for lynis (FEDORA-2020-059e1591d6)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for lynis (FEDORA-2020-f251753b0f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...