CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0482

The AMD Versal™ Adaptive SoC devices are vulnerable to a buffer overflow due to insufficient boundary checks within the USB boot mode . This vulnerability can be triggered by providing crafted images when USB boot mode is enabled through specific board modifications . Successful exploitation allo...

CVE-2026-103622

An use after free flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565742179...

CVE-2026-102828

A flaw was found in simple-git. The default security filter designed to block unsafe Git operations does not prevent trailer command configurations from being set. If an application passes untrusted user input into Git configuration options, an attacker can exploit this flaw to achieve arbitrary...

CVE-2026-78861

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

CVE-2026-78860

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

CVE-2026-78862

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - Отраженная XSS уязвимость в HotelDruid 3.0.7 Описание Уязвимость межсайтового скриптинга XSS в DigitalDruid HotelDruid v.3.0.7 позволяет злоумышленнику выполнять произвольный код и получать конфиденциальную информацию через параметр ripristinabackup в конечной точке creabackup.ph...

CVE-2024-32002

CVE-2024-32002 계산기를 실행하는 간단한 개념 증명PoC입니다macOS 예시만 해당. git clone --recursive 명령을 사용하면 이 저장소는 https://github.com/markuta/hooky 도 함께 내려받으며, 해당 저장소에는 post-checkout 스크립트가 포함되어 있습니다. 대부분 t7406-submodule-update.sh 파일의 커밋 수정을 기반으로 합니다. 실행 참고 : 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, 2.39.4 이전 버전은...

CVE-2023-27326

Parallels Desktop 虚拟机逃逸 该仓库包含针对 Parallels Desktop 漏洞（编号 CVE-2023-27326）的利用代码。此漏洞允许本地攻击者在受影响的 Parallels Desktop 安装实例中提升权限。 该利用代码已在 Parallels Desktop 18.0.0 53049 版本上测试通过，该漏洞已在 18.1.1 53328 安全更新 中被修复。 漏洞详情 具体缺陷存在于 Toolgate 组件中。问题源于在使用用户提供的路径进行文件操作之前，缺乏对路径的正确验证。攻击者可利用此漏洞提升权限，并在主机系统上当前用户的上下文中执行任意代码。...

CVE-2020-12753-PoC

CVE-2020-12753-PoC このリポジトリには、LG Stylo 4 AMZ/Q710ULM 上で Secure EL3 の任意コード実行を可能にする SBL1/aboot の脆弱性 🔋📱❄️🥾🔓 の概念実証 PoC が含まれています。これは、アップデート 20a と 20c、およびこの脆弱性の SBL1 バリアントでのみテストされています。 - Makefile : sblrop.s と rawresources.img884736 から rawresourcesamod.img をビルドします - rawresources.img884736 : 元の rawresource...

CVE-2024-4367-hands-on-01

!IMPORTANT 본 리포지토리는 취약점을 학습하기 위한 것입니다. 본 핸즈온은 반드시 자신이 관리하는 적절한 컴퓨터에서 진행해 주십시오. 불법 행위는 절대 하지 마십시오. 또한 본 리포지토리로 인해 발생한 일체의 손해·책임을 작성자는 지지 않습니다. CVE-2024-4367-hands-on CVE-2024-4367을 체험하는 핸즈온 poc.pdf 작성 python CVE-2024-4367-PoC/CVE-2024-4367.py "alert'document.domain'" 출처:...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

CVE-2026-101919

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...

[SECURITY] [DSA 6544-1] sabnzbdplus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6544-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6543-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6543-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2026 https://www.debian.org/security/faq -...

CVE-2024-4947-PoC

CVE-2024-4947 — V8 Maglev 타입 혼동 → 완전한 RCE d8 PoC CVE-2024-4947V8 Maglev 타입 혼동에 대한 완전하고 자체 포함된self-contained 익스플로잇 체인으로, 초기 타입 혼동 트리거에서부터 임의 코드 실행 에 이르기까지 전체를 아우릅니다. 이 PoC는 비-샌드박스non-sandboxed d8 빌드를 대상으로 실행되며, 코드 실행 증명으로 CVE-2024-4947-PWNED를 stdout에 출력합니다. ⚠️ 이는 패치된 공개 취약점에 대한 연구/교육용 PoC입니다. V8 셸의...

CVE-2026-101919 Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...