CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

cirro-azcli-ext

cirro-azcli-ext An Azure CLI extension that passively collects Azure resource data into a SQLite database compatible with Cirro https://github.com/bishopfox/cirro schema. It also logs all CLI invocations to a JSON-lines file. Hooks into knack events: EVENTINVOKERPOSTPARSEARGS — logs command...

CVE-2026-6951

CVE-2026-6951 simple-git Remote Code Execution ★ CVE-2026-6951 simple-git --config Option Filter Bypass RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 Overview CVE-2026-6951 is a remote code execution vulnerability in simple-git caused by an incomplete f...

Eclipse Theia - Unauthenticated Path Traversal

Eclipse Theia's plugin-ext backend exposes the hostedPlugin endpoint without constraining the resolved path to the plugin directory. An unauthenticated request using encoded traversal sequences can therefore read files accessible to the backend process. The built-in vscodebat plugin identifier...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...' Backslash Breakout Proof of concept for CVE-2026-17543 CVSS 9.8 Critical, CWE-89, a SQL injection vulnerability in PHP's procedural PostgreSQL extension. Vulnerability Summary pginsert, pgselect, pgupdate, pgdelete, and pgconvert all rout...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py A lightweight Python scanner for CVE-2023-48795 — the SSH Terrapin Prefix Truncation vulnerability. Terrapin is a protocol-level vulnerability in SSH that allows an attacker performing an active MitM to truncate the negotiated extension information, downgrading connection securit...

fisy-fuzz

FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...

CVE-2016-5195

This record is for learning purposes only; any illegal use is prohibited. Principle The vulnerability works by concurrently flushing dirty pages, causing the content of a file that was originally read-only to be modified. If the modified file is owned by root and has the SUID permission, it can b...

PT-2026-128097

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scx bypass claims bypass dispatch when the scheduler's depth goes from zero to one and releases it when the depth returns to zero, but propagates onl...

PT-2026-128137

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue A deferred reenqueue can read a freed user DSQ. The request stays on its CPU's deferred list until run deferred takes it, and the RCU callback that fre...

PT-2026-128098

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix stall when a task enqueued with SCX ENQ LAST lands back on its CPU's local DSQ With SCX OPS ENQ LAST, the last runnable task on a CPU is passed to ops.enqueue instead of being kept running. Exiting tasks without SC...

PT-2026-127230

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::process packet path in russh/src/client/encrypted.rs accepts repeated packets encoded with russh's private msg::EXT INFO = 7 before authentication, while the...

GitPython CVE-2022-24439 ext URL RCE

CVE-2022-24439 GitPython = 3.1.29: malicious ext::sh clone URL runs shell commands when an HTTP app passes user input to clonefrom with protocol.ext.allow=always. !/usr/bin/env python3 -- coding: utf-8 -- """GitPython CVE-2022-24439 ext:: transport RCE via clone URL injection.""" from future impo...

Malware in @drone-js-ext/core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @drone-js-ext/vip-badge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619: PHP2Shell — Security Research Lab & PoC...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell — WordPress Pre-Auth RCE CVE-2026-109618 / CVE-2026...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP session.uploadprogress File Poisoning + LFI -- Pre-Auth RCE...

Asciidoctor Include Ext 0.3.0 Command Injection

Asciidoctor Include Ext versions prior to version 0.4.0 contain a command injection vulnerability when rendering user-supplied AsciiDoc markup. This proof of concept demonstrates the issue through an include directive. https://packetstorm.news/download/237642...

Malicious Package

Overview @drone-js-ext/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...