170449 matches found
openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side
A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability...
halo-record v0.2.42
halo-record Tamper-evident audit trails for AI agents — hash-chained Runtime Records, rendered as a Runtime Report your customers can check themselves. Every action your agent takes tool calls, model calls, data access, approvals becomes one Runtime Record in an append-only, hash-chained log; the...
CVE-2026-34486-poc
CVE-2026-34486 Apache Tomcat EncryptInterceptor 绕过漏洞复现 一、漏洞概述 属性| 详情 ---|--- CVE 编号| CVE-2026-34486 严重程度| Important / High（CVSS 3.1: 7.5） 漏洞类型| CWE-311 敏感数据缺失加密 / CWE-807 不可信输入约束 受影响版本| Apache Tomcat 9.0.116 / 10.1.53 / 11.0.20 修复版本| Apache Tomcat 9.0.117 / 10.1.54 / 11.0.21 根因|...
CVE-2026-46331
CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Page-Cache Poisoning Vulnerability Executive Summary CVE-2026-46331 nicknamed “pedit COW” is a local Linux kernel privilege-escalation flaw in the traffic-control subsystem. An unprivileged user in an unprivileged network namespace can...
CVE-2022-37177
CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm When visiting the interview invite link that HireVue provides for an interview, you are directed to a terms page where you agree to the terms before beginning the recorded and timed interview process. This initial HTTP response...
Exploit for CVE-2026-67401
CVE-2026-67401 — cPanel & WHM EmailTrack SQL Injection → Root...
apache__jspwiki_CVE-2019-10078_2_11_0_M4_fixed
Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...
cve-2026-31431
CVE-2026-31431 — “Copy Fail”：Linux 内核 algifaead 本地权限提升 CISA KEV | CVSS 7.8 高危 | 影响 Linux 内核 4.14 – 2026 年初（约 9 年） 目录 1. 执行摘要 2. 风险评估 3. 技术深度剖析 4. 攻击方法 — 红队 5. 检测与应急响应 — 蓝队 6. 补丁与修复 7. 实验环境 8. 参考资料 1. 执行摘要 CVE-2026-31431 ，绰号 “Copy Fail” ，是 Linux 内核加密子系统中的一个高危本地权限提升（LPE）漏洞。低权限本地用户可在任何未打补丁的系统上数秒内提升至...
NSEC3-Encloser-Attack
NSEC3-Encloser-Attack 区域文件生成 本项目使用自定义的 NSEC3 参数生成 DNS 区域文件，以复现和评估 CVE-2023-50868 中的攻击。 要求 Python3（已在 Python3.10 上测试） 已安装的 Python 依赖： cryptography 42.0.5 dnspython 2.6.1 组件 lib：Python 工具，包括： keys.py：用于加载/存储密钥到文件的封装函数 nsec.py：DNSSEC NSEC 哈希的实现 dnssec.py：支持 NSEC3 的修改/修补版 dnspython 函数 config.py：配置加载工...
CVE-2020-2883
CVE-2020-2883 root@kitploit: re write of: https://github.com/zhzyker/exphub/blob/master/weblogic/cve-2020-2883cmd.py my poc is python3 enjoy and happy hacking...
Python-CVE-2020-25213
Python-CVE-2020-25213 用于 WP File Manager 漏洞的 Python 交互式利用工具。WordPress 的 File Manager wp-file-manager 插件 6.9 版本之前允许远程攻击者上传并执行任意 PHP 代码，因为它将一个不安全的示例 elFinder 连接器文件重命名为 .php 扩展名。 该脚本使用 argparse、requests、re、sys、os、json 和 random Python 模块。 要通过 pip 安装这些模块，请在命令行中执行以下命令： root@kitploit: pip install -r...
The push to stop algorithms controlling social media feeds has begun
Remember when social media was filled only with posts from your friends, rather than what an algorithm decided you wanted to see? So does the Australian government, and it wants that internet back. Yesterday, the government released draft legislation outlining a Digital Duty of Care. The proposal...
CVE-2025-1974
CVE-2025-1974 — IngressNightmare ingress-nginx Introduction This document presents a study of the vulnerability CVE-2025-1974 affecting the ingress-nginx component validating admission controller for Kubernetes. CVE-2025-1974 is a critical vulnerability CVSS 3.1 9.8, an unauthenticated Remote Cod...
Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.
Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to ...
Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.
Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2021-23369 DESCRIPTION: The package handlebars before 4.7.7 are vulnerable to Remote Code Execution RCE when selecting certain compiling options to compile templates coming...
Exploit for Server-Side Request Forgery in Openclaw
CVE-2026-62201 — OpenClaw Sandbox Exec-Server Network Policy B...
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...
CVE-2025-60787
CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 OS Command Injection A proof-of-concept exploit OS Command Injection for vulnerability in motionEye, a web frontend for the motion daemon. The vulnerability abuses the imagefilename configuration parameter, which is passed directly to the shell...
NuReaper
NuReaper — NuGet Package Security Scanner ⚠️ Work in Progress — The project is actively developed. Core scanning engine is functional; database persistence, caching, and full test coverage are planned for upcoming iterations. NuReaper is a .NET 8 backend API that automatically analyzes the securit...