170502 matches found
CopyFail-Patcher
Script de parche para CVE-2026-31431 Este repositorio proporciona un script para la vulnerabilidad CopyFail, para Debian/Ubuntu/RHEL/Fedora, no lo probé en otras distribuciones pero de todos modos... Solo sigue estos pasos: $ git clone https://github.com/mhdgning131/CopyFail-Patcher.git $ cd...
WSUS-RCE-Mitigation-59287
🚨 ALERTA CRÍTICA DE CIBERSEGURIDAD: RCE en WSUS CVE-2025-59287 🚨 CREADOR Y CRÉDITOS: @esteban11121 Esta guía ha sido elaborada para ayudar a la comunidad a mitigar rápidamente la vulnerabilidad. ESTADO: Explotación Activa In-the-Wild Confirmada. Esta es una vulnerabilidad de Ejecución Remota de...
cosmicsting-validator
A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...
cve-2026-31431-fleet-remediator
Herramienta de Auditoría y Remediación de Flota para CVE-2026-31431 中文说明 Este proyecto es un orquestador a escala de flota para auditar y remediar CVE-2026-31431 en hosts Linux en redes empresariales/internas. Inicio de sesión SSH por lotes a múltiples hosts Recopilación de evidencia de riesgo y...
patch-diff-CVE-2023-22527
Este repositorio no tiene un README...
SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass-
SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass- Microsoft acaba de publicar parches de emergencia para CVE-2026-21509, un zero-day en el paquete Office que evita las mitigaciones de OLE/COM cuando un usuario simplemente abre un archivo. Creen que su "cambio del lado del servicio" para Office 202...
CVE-2026-3304
Entorno de Laboratorio CVE-2026-3304 Solo con fines educativos y de investigación. Atacar sistemas sin autorización es ilegal. Este entorno de laboratorio fue construido analizando el parche de Multer 2.1.0 y su código de prueba oficial. El servidor vulnerable replica las condiciones exactas...
CVE-2026-2005
Parche ascendente para CVE-2026-2005 pgcrypto, PostgreSQL 17.7 → 17.8...
PyJWT BOM Bypass
Affected Package- Package: PyJWT pyjwt on PyPI- Repository: https://www.google.com/url?q=https://github.com/jpadilla/pyjwt=gmail=1781794518474000=E- Affected version: 2.13.0- Vulnerability class: Algorithm confusion / patch bypass--- Root CausePyJWT 2.13.0 introduced a guard in...
CVE-2026-41940-Security-Patch
CVE-2026-41940-Security-Patch Unofficial temporary patch for the CVE-2026-41940 vulnerability Can be used for temporary defense Please upgrade to the official release as soon as conditions permit cPanel Security Announcement:...
ShieldBreak
ShieldBreak - Vulnerabilidad 0day en Windows Defender Microsoft no ha parcheado correctamente la vulnerabilidad RoguePlanet CVE-2026-50656; este PoC demuestra un bypass completo del parche. El PoC fue probado en la última versión de Windows 11 25h2 + canal Canary y Windows Server 2025; el PoC...
CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch
CVE-2026-3030 – Prototype Pollution in JSON Merge Patch Program Code Node.js // server.js - Vulnerable REST API with deep merge const express = require'express'; const app = express; app.useexpress.json; let config = role: 'user', settings: ; // Insecure deep merge function pollutable via proto...
januscape
Januscape — Linux KVM/x86 guest-to-host escape tracking site Source for the Januscape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/x86 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...
ipv6_frag_escape
IPV6FRAGESCAPE — Linux IPv6 fragmentation container escape tracking site Source for the IPV6FRAGESCAPE patch-status tracker: a single-page site recording which distributions have shipped a fix for the IPv6 fragmentation container escape in the Linux kernel. Where the facts live Everything about t...
CVE-2026-16723
CVE-2026-16723 This is N-day patch we releasing by testing our model capabilities...
win-exp-
DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...
code-shield
protocol-remediator An MVP that normalizes vulnerability findings in C/C++ protocol/platform code into reproducible evidence and validates candidate patches in isolated copies. code-shield was a working name with a confirmed name-collision risk, so a neutral internal name is used for the public...
CVE-2026-38360
CVE-2026-38360: Path Traversal in dash-uploader Unauthenticated path traversal in fohrloop/dash-uploader Python, PyPI allowing arbitrary file write, leading to but not limited to Remote Code Execution RCE , application source code overwrite, stored XSS, and persistent backdoor installation. ⚠️ No...
CVE-2017-8046-DEMO
spring data rest CVE-2017-8046 demo test please UPGRADE spring data rest NOW. steps 启动本应用 创建test instance POST /entityPersons/ HTTP/1.1 Host: localhost:8080 Content-Type: application/json Cache-Control: no-cache "firstName":"f2" 利用spel注入, 会启动C:\Windows\system32\calc.exe PATCH /entityPersons/1...