Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_79162)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202679162 advisory. bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling CVE-2026-19667 bind: BIND: Denial of Service via crafte...

EulerOS 2.0 SP13 : unbound (EulerOS-SA-2026-4202)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes...

CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...

CVE-2026-108772

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched...

CVE-2026-108772

A path traversal vulnerability exists in bleenco abstruse versions up to 2.1.0 . The flaw is located in the filepath.Join function within the file server/api/worker/download_cache.go file of the Cache Endpoint component. By manipulating the File argument, a remote attacker can perform a path trav...

CVE-2026-108772 bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched...

CVE-2025-32421---Race-Condition-Vulnerability---Next.js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC Lab for CVE-2025-32421 – Next.js Race Condition Cache Poisoning Simulation CVE-2025-32421 Lab – Next.js Race Condition Cache Poisoning This lab reproduces the behavior described in CVE-2025-32421 through a simulation of race condition +...

CVE-2026-53266

CVE-2026-53266 — Linux ebtables SNAT ARP-rewrite page-cache write tracking site Source for the CVE-2026-53266 patch-status tracker: a single-page site recording which distributions have shipped a fix for the netfilter bridge ebtables SNAT ARP-rewrite page-cache write in the Linux kernel CISA KEV...

chronomaly

Chronomaly Chronomaly es un exploit del kernel para el kernel de Android / Linux usando CVE-2025-38352. El exploit fue escrito específicamente para el kernel de Linux v5.10.157, pero debería funcionar contra todos los kernels vulnerables v5.10.x, ya que no requiere ningún offset específico del...

CVE-2023-6063-PoC

CVE-2023-6063-PoC Exploiting SQL Injection Vulnerability in WP Fastest Cache CVE-2023-6063...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Dirty Frag Local Privilege Escalation Proof of Concept ⚡ 📖 Description This repository contains a Proof of Concept PoC for: CVE-2026-43284 — Dirty Frag The exploit demonstrates a vulnerability affecting vulnerable Linux systems. 🧠 About Dirty Frag Dirty Frag...

cve_2026_31431

CVE-2026-31431 "Copy Fail" Kit de herramientas Detector y LPE de prueba de concepto para el error de escritura temporal en la caché de páginas de Linux algifaead / authencesn divulgado el 2026-04-29. Divulgación del informe: https://xint.io/blog/copy-fail-linux-distributions Autorización Úselo...

spectre-attack

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

fast-security-scanners

Escáneres/comprobaciones rápidos de seguridad Una pequeña contribución a la comunidad : Usamos todas estas herramientas en evaluaciones de seguridad y en nuestro servicio de monitoreo de vulnerabilidades Verifique si su dominio tiene una toma de control de NS DNS Repo docker run --dns=8.8.8.8 -e...

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

DirtyFrag

Dirty-Frag Linux CVE-2026-43284 & CVE-2026-43500 Copied from @V4bel : Thanks : This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

ecs_checker

EDNS Client Subnet ECS Remote Detection Tool - CVE-2025-40766 This tool checks whether a remote DNS resolver supports EDNS Client Subnet ECS — a DNS extension that may expose systems to cache poisoning or information leakage vulnerabilities such as CVE-2025-40766. 🔍 What It Does Sends a DNS query...

CVE-2019-19781

CVE-2019-19781 Just a python3 CVE-2019-19781 exploit for Citrix behind a cache. This version accepts '', '|', '2&1'... etc USAGE python3 CVE-2019-19781.py citrix.example.org 'cat /etc/passwd' Todo Repeat if Age header in response. Continuous mode -c. Check mode Get /vpn/../vpns/cfg/smb.conf...