CVE-2021-22005-

CVE-2021-22005- CVE-2021-22005批量验证python脚本 运行环境：python3 运行：将要验证的url放入一个文本文件，例如url.txt，再运行 python3 url.txt即可...

CVE-2021-26295

CVE-2021-26295-POC 利用DNSlog进行CVE-2021-26295的漏洞验证。 使用 poc: 将目标放于 target.txt 后运行python poc.py即可。（Jdk环境需12，否则ysoserial不能正常生成payload） exp: python exp.py https://baidu.com 然后进入命令执行界面（无回显） 仅供学习交流，请勿用于其他用途。...

asa_tools

Cisco ASA RCE Проверка Этот скрипт может быть использован для проверки наличия CVE-2016-1287. Требуется python3 и установленный модуль python hexdump root@kitploit: $ sudo pip3 install hexdump Запуск осуществляется следующим образом root@kitploit: python3 cisco-asa.py IP.IP.IP.IP:port...

USN-8699-1 libssh vulnerabilities

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-15370 It w...

CVE-2026-45022

A flaw was found in go-git, an extensible Git implementation library. This vulnerability arises from go-git's differing interpretation of malformed Git objects compared to upstream Git. When processing commit or tag objects with ambiguous or malformed headers, go-git may sign or verify a commit...

CVE-2026-82879

DataEase before 2.10.26 contains multiple access control defects in its sharing link module. Tickets are not bound to the target share UUID, allowing a valid ticket issued for one share to be reused against another via ShareTicketManage.validateTicket (POST /de2api/share/proxyInfo). Additionally,...

EUVD-2026-68462

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...

break-golf

break-golf Un tablero para resultados de criptoanálisis que están demostrados , no ejecutados. Un desafío fija dos mundos y el enunciado que debes demostrar. Escribes un adversario y una prueba de que los distingue. La victoria es la prueba: no se ejecuta, muestrea ni reproduce nada, y ningún...

CVE-2026-82662

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...

CVE-2026-82662

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...

UBUNTU-CVE-2026-82662

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...

EUVD-2026-68440

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...

CVE-2026-82662

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – Amplificación del handshake QUIC mediante la omisión de la validación de dirección Código del programa simulación en Python root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large...

CVE-2026-62243

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

dnsmasq-cve-2026

Herramienta de Verificación QA para dnsmasq CVE-2026 Herramienta automatizada de caja negra para verificar 6 vulnerabilidades de dnsmasq mayo de 2026. Envía paquetes de ataque a un DUT en vivo e informa PASS/FAIL — sin necesidad de acceso al código fuente. Inicio rápido root@kitploit: Configure e...

cve-2026-47777

CVE-2026-47777 — Omisión de Autorización de Colecciones Destacadas en Mastodon Resumen Divulgué de manera responsable una vulnerabilidad de Omisión de Autorización de Alta Gravedad que afecta el pipeline de federación experimental de Colecciones Destacadas de Mastodon. ID de CVE: CVE-2026-47777...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

CVE-2025-26465

CVE-2025-26465 OpenSSH 클라이언트는 6.8p1 9.9p1포함 버전 사이에 논리 오류가 있어, VerifyHostKeyDNS 옵션이 활성화된 경우 능동적 MitM 공격에 취약해집니다. 이로 인해 악의적인 침입자가 클라이언트가 연결을 시도할 때 합법적인 서버로 위장할 수 있습니다. 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 다음 취약한 버전을 매칭합니다: root@kitploit: - "SSH-2.0-OpenSSH6.8p1" - "SSH-2.0-OpenSSH6.9p1" -...