CVE-2024-6387fixshell

CVE-2024-6387fixshell Only affects 8.5p1 = OpenSSH 9.8p1 Install build dependencies sudo apt-get update sudo apt-get install -y build-essential zlib1g-dev libssl-dev Download specified version source code wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.8p1.tar.gz Extract and...

flareon2024

Flare-On 11 solutions Source codes of my solutions for the tasks from Flare-On11 challenge. My writeups of selected tasks available here...

cacti-rce-cve-2022-46169-vulnerable-application

Aplicación vulnerable de inyección de comandos en Cacti v1.2.22 CVE-2022-46169 Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2022-46169. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsela bajo su propio riesgo! Se recomien...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

Vulnerability Assessment and OSINT: CVE-2012-1823 My repository documents the process of identifying, analyzing, and gathering Open Source Intelligence OSINT on a specific security vulnerability detected during a target network scan. Overview of the Process The workflow carried out across this...

EUVD-2026-38245

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation...

CVE-2026-87890

Django versions 6.1 before 6.1.2 , 6.0 before 6.0.9 , and 5.2 before 5.2.18 are vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is an incomplete fix for CVE-2026-15307 in spatial lookups , where providing bytes values can trigger the Django process to make network requests via...

BIT-GRAFANA-2026-81841 Paused shared dashboard access tokens still expose data source configuration

Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...

nextjs-security-update

nextjs-security-update There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts. Uses the official Vercel fix tool under the hood. What happened Dec 11, 2025:...

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward...

stylesmuggler-adobe-patches

disrex/stylesmuggler-adobe-patches Un plugin Composer che applica la correzione ufficiale APSB26-146 di Adobe CVE-2026-75650, riferimento interno VULN-39341 per la zero-day StyleSmuggler a Magento Open Source e Mage-OS , automaticamente, rilevando la versione installata. Corregge i pacchetti...

rats-re

Rats! source reconstruction with local LLMs This repository is a work-in-progress reconstruction of the source code for RATS.EXE, the original Windows version of Rats! 1994 by Sean O'Connor. It builds a Win32 executable with Microsoft Visual C++ 4.1 under wibo and can be tested in DREAMM. The...

CVE-2025-70829

CVE-2025-70829: Information Exposure in Datart 中文文档 1. Vulnerability Overview CVE ID : CVE-2025-70829 Product : Datart Version : v1.0.0-rc.3 Vulnerability Type : Information Exposure An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive dat...

CVE-2015-7214

CVE-2015-7214 What is CVE-2015-7214? Please see the following link. Cross-site reading attack through data and view-source URIs Contents www/index.html SOP bypass PoC for Web local/index.html SOP bypass PoC for local Requirements Firefox version 42.0 or earlier The following is the download link ...

CLEANSTART-2026-EX19348 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

[SECURITY] Fedora 45 Update: frama-c-33.0-3.fc45

Frama-C is a suite of tools dedicated to the analysis of the source code of software written in C. Frama-C gathers several static analysis techniques in a single collaborative framework. The collaborative approach of Frama-C allows static analyzers to build upon the results already computed by...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

The vulnerability of Visual Studio Code’s source editor, related to deficiencies in HTTP request processing, allows attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor, related to the manipulation of intersite requests, allows a hacker to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor lies in its insufficient checking of unusual or exceptional states, allowing attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor, related to the occurrence of interpretation conflicts, allows attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...