CVE-2022-26923

CVE-2022-26923 As described by Tenable: Active Directory Domain Services Elevation of Privilege Vulnerability CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Summary: CVE-2022-26923 exploits a vulnerability in Microsoft Active Directory Certificate...

save-pixels-updated

This is an updated version of save-pixels which patches the CVE-2020-8175 security issue. At the time of creation, every file is the same as the ones from the original repository, excluding the package.json. save-pixels-updated The following is from the save-pixels GitHub page. As mentioned befor...

CVE-2023-47400

CVE-2023-47400 Proof of Concept for the CVE-2023-47400 Authenticated PHP Remote Code Execution via Arbitrary file write on Nagios XI 5.11.0 !Note This poc is based on the technical advisory published by NCC group...

CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH

CVE-2024-6387: Race Condition in Signal Handling for OpenSSH Overview CVE-2024-6387 is a critical vulnerability discovered in OpenSSH's server sshd that allows an attacker to potentially achieve unauthenticated remote code execution RCE as root. The vulnerability arises from a race condition in t...

Kalim_Backdoor

Kalim Backdoor Malware Analysis Report This Report will talk about the functionality of Kalim Backdoor Malware. Table of Contents: - What is Backdoor? - Technical Analysis. - Summary. - Tactics & Technique MITRE ATT&CK. - IOCs. - Yara Rule. What does Backdoor mean? A backdoor is a hidden...

proftpd-cve-2019-12815

ProFTPD 1.3.x README Status Introduction ProFTPD is a highly configurable FTP daemon for Unix and Unix-like operating systems. See the README.ports file for more details about the platforms on which ProFTPD in known or thought to build and run. ProFTPD grew from a desire for a secure and...

CVE-2024-9264

CVE-2024-9264 References https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2024-9264 Target| Grafana SQL Expressions Impact| Local File Inclusion LFI, Remote Code Execution RCE Severity| Critical CVSS 9.9 Attack Condition|...

MassCyberCenter-Mentorship-Project-

MassCyberCenter-Mentorship-Project- Overview This repository documents my journey and deliverables during the MassCyber Center mentorship program. This mentorship program tasked us with completing a cybersecurity project and then presenting it at a showcase event attended by cybersecurity...

react2shell-CVE-2025-55182-full-rce-script

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

printnightmare-detection-mitigation-lab

PrintNightmare Detection and Mitigation Lab A sanitised academic case study demonstrating how a Windows domain lab was designed, monitored and hardened while investigating CVE-2021-34527 PrintNightmare in a controlled virtual environment. Safety note: This repository focuses on systems...

CVE-2025-55182

CVE-2025-55182 A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. 🚀 Installation wget -q -O /usr/bin/CVE-2025-55182 https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/CVE-2025-55182 && chmod +x...

hardstop

Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution Architectural Comparison: Off-Board Hardware Fabrics DPUs / SmartNICs vs. In-Cache Kernel Preemption Hard Stop Off-board hardware security architectures route agent execution telemetry out-of-band across host I/O buses...

CVE-2026-42945

CVE-2026-42945 - NGINX Rift Vulnerability Analysis and Reproduction Overview CVE-2026-42945 codename "NGINX Rift" is a heap buffer overflow vulnerability in the NGINX ngxhttprewritemodule, with a CVSS v4 score of 9.2 Critical. Discovered by the depthfirst security research team in April 2026, thi...

CVE-2026-31694-POC

CVE-2026-31694: FUSE readdir cache out-of-bounds write A missing bounds check in fs/fuse/readdir.c:fuseadddirenttocache. A FUSE server returns a dirent with namelen = 4095, which serializes to a 4120-byte record. The kernel copies it into a single 4096-byte page-cache page and overflows by 24...

Security Bulletin: Multiple vulnerabilities have been found in IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-14456 DESCRIPTION: Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate...

CVE-2025-10585-The-Chrome-V8-Zero-Day

CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today ⚔️🛡️ Google has released an out-of-band patch this week for CVE-2025-10585 , a serious type-confusion vulnerability in Chrome’s V8 JavaScript / WebAssembly engine. The bug is not theoretical — Google’s Threat Analysis Group confirmed...

CVE-2023-5412

CVE-2023-5412 Image horizontal reel scroll slideshow = 13.2 - Authenticated Subscriber+ SQL Injection via Shortcode Description: The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to...

CVE-2026-48558

CVE-2026-48558: SimpleHelp OIDC Authentication Bypass !WARNING This code is provided AS IS for educational and research purposes only. Do not use this PoC on production systems, shared environments, or any unauthorized targets. This exploit demonstrates a critical remote code execution RCE...

CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-

CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-...

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site...