CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681

CodeAstro Online Job Portal 1.0 is affected by an unrestricted file upload vulnerability in the file /users/update-profile.php. Manipulation of the Name argument allows a remote, authenticated attacker (low privileges) to upload arbitrary files, leading to low impact on confidentiality, integrity...

cveye

C V E y e Zero-dependency CLI for CVE details & expl...

CVE-2026-74517

A flaw was found in KVM Kernel-based Virtual Machine. This vulnerability occurs when the system attempts to process a delayed I/O APIC End-of-Interrupt EOI after the associated virtual CPUs vCPUs have been destroyed. This timing issue results in a Use-After-Free UAF condition, where the system...

CVE-2026-74467

A flaw was found in the s390/qeth component of the Linux kernel. An unprivileged local user could exploit this vulnerability by invoking specific SIOCDEVPRIVATE ioctl commands, such as SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE, and SIOCQETHQUERYOAT. These commands were not properly restricte...

S5Late

S5Late Exploit tethered del bootrom/DFU per iPod. Attualmente supporta solo Nano 7G; per supportare Nano 6G è necessario aggiornare gli offset. Esecuzione Metti l'iPod in modalità DFU. Poi esegui: root@kitploit: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode...

DCOMUploadExec

DCOM Upload & Execute DCOM-Lateral-Movement-POC, der die IMsiServer-Schnittstelle missbraucht https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor Die Projektmappe enthält 2 Projekte DCOMUploadExec - Ein C++-Projekt, das den Lateral-Movement-Angriffscode enthält...

LeakedWallpaper

Leaked Wallpaper Dies ist ein Tool zur Privilege-Escalation behoben mit CVE-2024-38100 in KB5040434, mit dem wir den NetNTLM-Hash eines Benutzers aus jeder Sitzung auf dem Computer leaken können, selbst wenn wir als Benutzer mit geringen Privilegien arbeiten. Verwendung root@kitploit:...

vmware-exploitation

VMware-Exploitation =================== Eine Sammlung von Links zu VMware-Escape-Exploits. Pull Requests sind willkommen. Folgt @andreyknvl auf Twitter oder @[email protected] auf Mastodon, um über Updates benachrichtigt zu werden. Forschung 2024 "N-Days verketten, um alles zu...

ExploitGSM

ExploitGSM Exploit per kernel 6.4 - 6.5 e un altro exploit per 5.15 - 6.5 Telegram per contatti - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua D'inverno ho trovato due vulnerabilità nel driver ngsm. Dopo di che, Jammes mi ha scritto proponendomi di comprarle. Come avrete capit...

PoC

Pedro Ribeiro @pedrib Exploit Dumping Grounds Dieses Repository enthält Informationen, Exploits, Skripte usw., die ich der Öffentlichkeit zugänglich gemacht habe, und ist unter https://github.com/pedrib/PoC zu finden. advisories: alle meine öffentlichen Advisories, Forschungsnotizen usw. Pwn2Own:...

CVE-2024-12558-exploit

Questo repository non contiene un README...

Exploit for Path Equivalence in Apache Tomcat

No d...

viper

Questo repository è archiviato e lo sviluppo di Viper 1.x è discontinuato. Un refactoring completo del progetto è iniziato conViper 2. Viper è un framework di analisi e gestione binaria. Il suo obiettivo fondamentale è fornire una soluzione per organizzare facilmente la tua collezione di campioni...

CVE-2026-77391

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...

CVE-2026-76137

Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local user account as a running VOCALOID6 Editor instance may escalate privileges via a local named pipe...

EUVD-2026-63793

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-77392

The "Researcher" argument in the saveUser function of /public/submit.php (SourceCodester Dynamic Input Field Generator v1.0) is passed unsanitized to SQL queries, enabling remote SQL injection. CVSS 6.3 (MEDIUM). A public PoC exploit exists at https://gist.github.com/rionyxraiza/6b22a5e02da6b8581...

CVE-2026-77392 SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-77391 SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...