Exploit for SQL Injection in Metabase

CVE-2026-72898 — Metabase unauthenticated SQL injection detec...

CVE-2026-81277

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability

SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin Suggestion Engine for WooCommerce versions = 2.0.11...

WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Kali Forms versions = 2.4.23...

CVE-2026-81276

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-81274

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-81273

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Ditty versions = 3.1.67...

WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions = 2.2.4...

WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Brian Willows in WordPress Plugin GeoDirectory versions = 2.8.176...

CVE-2026-81271

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentPlayer Pro versions = 1.3.2...

CVE-2026-81272

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-80530

A flaw was found in the Linux kernel's XFS filesystem. When performing file range exchanges with the XFSEXCHMAPSINO1WRITTEN flag set, the reflink flag can be prematurely cleared from an inode that still manages shared written data. This can lead to data corruption between files that share data...

Am-I-affected-by-Meltdown

Я подвержен уязвимости Meltdown?! Проверка Meltdown CVE-2017-5754 Что я такое? Proof-of-concept / Exploit / Проверяет, подвержена ли система варианту 3: кража данных из кэша CVE-2017-5754, также известному как MELTDOWN. Основная идея в том, что пользователь узнает, правильно ли защищена работающа...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Технический разбор Протестированные дистрибутивы / Версии Дистрибутив| Версия ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

awesome-yara

Потрясающий YARA Курируемый список замечательных YARA-правил, инструментов и ресурсов. Вдохновлён awesome-python и awesome-php. YARA — это акроним для: YARA: Another Recursive Ancronym Ещё один рекурсивный акроним или Yet Another Ridiculous Acronym Очередной нелепый акроним. Выбирайте. -- Victor...

CVE-2017-0199

Эксплойт-тулкит CVE-2017-0199 - v4.0 Эксплойт-тулкит CVE-2017-0199 - v4.0 — это удобный скрипт на Python, который предоставляет пентестерам и исследователям безопасности быстрый и эффективный способ тестирования RCE в Microsoft Office. Он может сгенерировать вредоносный RTF/PPSX-файл и доставить...

dirtyfrag

Dirty Frag: Универсальный LPE для Linux Аннотация В этом документе описывается класс уязвимости Dirty Frag, впервые обнаруженный и описанный Hyunwoo Kim @v4bel, который может получить привилегии root на основных дистрибутивах Linux путем объединения уязвимости xfrm-ESP Page-Cache Write...

PiDense

▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄ ▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░▌ ▐░░░░░░░░░░░▌▐░░▌ ▐░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌ ▐░█▀▀▀▀▀▀▀█░▌ ▀▀▀▀█░█▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░▌░▌ ▐░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀▀▀ ▐░▌ ▐░▌ ▐░▌ ▐░▌ ▐░▌▐░▌ ▐░▌▐░▌ ▐░▌▐░▌ ▐░▌...