CVE-2026-80675

A flaw was found in libbpf, a library for working with eBPF extended Berkeley Packet Filter programs in the Linux kernel. This vulnerability occurs when the signed loader fails to ensure that metadata maps are exclusive during verification. A hostile host could exploit this by omitting exclusivit...

CVE-2026-82662

A flaw was found in Nodemailer where it disables Transport Layer Security TLS certificate verification. A remote attacker, positioned between the user and the server a machine-in-the-middle attack, could exploit this by intercepting OAuth2 token requests. This allows the attacker to capture...

libfido2

libfido2 image:https://github.com/yubico/libfido2/workflows/linux/badge.svg"Linux Build Status github actions", link="https://github.com/Yubico/libfido2/actions" image:https://github.com/yubico/libfido2/workflows/macos/badge.svg"macOS Build Status github actions",...

CVE-2024-24139

CVE-2024-24139: 带邮箱验证的登录系统SQL注入 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24139.md 概念验证PoC : https://github.com/BurakSevben/CVE-2024-24139/blob/main/CVE-2024-24139.md...

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template 此 nuclei 模板用于验证漏洞，无需对目标机器执行任何命令。...

project_bias

projectbias 一个用 Ada 编写并经 SPARK 正式验证的高性能、无偏倚加密流引擎。 该引擎通过丢弃模偏倚（modulo bias）值，将原始熵映射到自定义字母表时保证零统计偏倚， 并直接从原生操作系统内核池获取安全字节。 验证级别 SPARK Level 4（正式验证）： 完全证明不存在运行时错误（AoRTE），并满足功能契约。 工具链兼容性： 已使用 GNAT/SPARK Pro 2021 以及通过 Alire 获取的最新社区 SPARK 工具链进行验证。 核心架构与熵池 该引擎通过 Interfaces.C 直接对接底层操作系统 API，以消除抽象层与延迟：...

CVE-2021-21985

CVE202121985 描述 该脚本用于检查vCenter Server上的CVE-2021-21985漏洞及补丁情况。 要求 Python3 Python3标准库 安装 root@kitploit: git clone https://github.com/mauricelambert/CVE202121985.git ./ 示例 检查IP地址10.0.0.2、10.0.0.3和主机名vCenter3： root@kitploit: python3 CVE202121985.py 10.0.0.2 10.0.0.3 vCenter3 许可协议 遵循 GPL 3.0 版本 许可。...

CVE-2025-7955

CVE-2025-7955 RingCentral Communications 1.5 - 1.6.8 - 缺少服务器端验证导致通过 ringcentraladminlogin2faverify 函数绕过认证 🚨 CVE-2025-7955 | RingCentral Communications WordPress 漏洞利用 📝 漏洞概述 CVE: CVE-2025-7955 受影响插件: RingCentral Communications WordPress 受影响版本: 1.5 – 1.6.8 CVSS 评分: 9.8 严重 类型: 认证绕过 缺少服务器端验证...

CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider OAuth 认证绕过 → DAG RCE 在 Apache Airflow 的 FAB auth-manager provider（apache-airflow-providers-fab）中存在认证绕过，可通过触发的 DAG 实现远程代码执行。 该提供程序默认在禁用签名验证的情况下解码 Azure OAuthidtoken（airflow/providers/fab/authmanager/securitymanager/override.py，decodeandvalidateazurejwt）...

CVE-2026-61641 Wallos: OIDC account takeover via email-based account linking without `email_verified` check

Wallos is an open-source, self-hostable personal subscription tracker. From version 4.0.0 to before version 4.9.6, Wallos's OIDC login links an incoming OIDC identity to an existing local account by matching the email claim alone, without verifying that the IdP marked that email as verified...

Apache-Log4j2-RCE

Apache Log4j2 RCE 验证环境 Since from 2021.12.09 Some Ref https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg 搭建环境 maven引入相关包及存在漏洞版本范围 root@kitploit: org.apache.logging.log4j log4j-api 2.14.1 org.apache.logging.log4j log4j-core 2.14.1 检查 利用dnslog探测是否使用 ldap结合jndi利用RCE jdk版本有关，JDK...

CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP

CVE-2026-8888 – 打印机固件未签名更新（通过 HTTP） 程序代码（Python HTTP 服务器 + 打印机模拟器） root@kitploit: !/usr/bin/env python3 printerfirmwareserver.py - Simulated printer that fetches updates over HTTP import requests, hashlib, os FIRMWAREURL = "http://updates.printer.local/firmware.bin" CURRENTVERSION = 1.0 def...

CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – DKIM 签名验证绕过（头部规范化缺陷） 程序代码（Python 邮件解析模拟） root@kitploit: dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From: [email protected] To: [email protected] Subject: Hello DKIM-Signature: v=1; a=rsa-sha256;...

CVE-2026-82813

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch...

EUVD-2026-68720

Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an attacker-controlled URL parameter to the share-link authentication endpoint that omits the expected resource identifier from the token...

CVE-2026-72001

Pangolin versions prior to 1.22.0 contain an authentication bypass in the share-link endpoint. The root cause is that an attacker-controlled URL parameter can omit the expected resource identifier from the token verification call, allowing a holder of a single valid share link to authenticate aga...

CVE-2026-72001 Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint

Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an attacker-controlled URL parameter to the share-link authentication endpoint that omits the expected resource identifier from the token...

CVE-2026-19953 URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI 混淆代理漏洞（Confused Deputy）- 安全研究验证项目 重要声明 本仓库为衍生编译仓库，与原始主仓库构成附属关系。 角色| 仓库| 说明 ---|---|--- 主仓库| inforcqb/cve-2026-0013-exploit| 原始漏洞研究 本仓库| XiaoBaiLovesStirring/cve-2026-0013-poc| 云端编译产物分发 安全协议 访问本仓库前，请务必阅读并理解 SECURITYPROTOCOL.md。 要点： 本仓库不提供源代码、攻击工具或漏洞利用框架...

EUVD-2026-68680

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch...