1039228 matches found
EUVD-2026-76669
In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix and remove redundant unevictable folio handling sortfolio has a shortcut for moving folios that are no longer evictable but are still sitting on a generation list. However, this shortcut is buggy. It does not follow...
EUVD-2026-76667
In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...
EUVD-2026-76558
In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort at umount cephdirtyfolio takes a wrbuffer claim on each newly dirtied folio: it bumps iwrbufferref taking an ihold on the 0-1 transition and attaches the snapcontext to...
CVE-2026-89755
CVE-2026-89755 affects the Linux kernel in the mm/migrate_device subsystem. The root cause is a stale folio mapping retained after folio_free_swap() succeeds: the mapping still points to swap_space, causing folio_migrate_mapping() to take the mapped-folio path and operate on swap_space.i_pages wi...
CVE-2026-89646
CVE-2026-89646 affects the Linux kernel Ceph filesystem (cephfs) . In ceph_dirty_folio(), a wrbuffer reference (via ihold()) is taken on each newly dirtied folio and is only released by writepages_finish(). When ceph_submit_write() aborts—such as during unmount when ceph_inc_osd_stopping_blocker(...
CVE-2026-89618
CVE-2026-89618 affects the Linux kernel 's eventfs (event filesystem) subsystem. The root cause is that init_ei() does not initialize the eventfs_inode list heads (ei->children and ei->list). When eventfs_create_dir() fails due to memory pressure , it calls free_ei() before the lists are in...
CVE-2026-89572
CVE-2026-89572 affects the Linux kernel cpufreq: apple-soc driver. The root cause is an incorrect OPP (Operating Performance Points) table cleanup mechanism: apple_soc_cpufreq_init() adds OPP tables loaded from firmware, but some failure paths do not remove them, and the driver relies on dev_pm_o...
CVE-2026-89507
CVE-2026-89507 is a race condition in the Linux kernel's RDMA/ucma subsystem, specifically in ucma_write_cm_event(). The function re-reads ctx->file for each of its four dereferences, and ucma_migrate_id() can swap that pointer mid-sequence while the writer sleeps inside mutex_lock(). This cau...
CVE-2026-53952
GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and below) are affected by a logic flaw that allows unauthenticated attackers to create a new administrator account . The root cause is a self-exclusion bug in the post-installation deletion logic for admin/setup.php, which fails to r...
SecArchive
🥷 SecArchive - Cybersecurity Resource Collection A curated archive of high-quality resources for learning cybersecurity, bug bounty, ethical hacking, and penetration testing. ⚠️ For educational purposes only. Use tools and techniques responsibly. Maintained by MD Kaif...
bug-reaper
BugReaper Structured web2 bug bounty AI skill — 18 vulnerability classes, 4 bug bounty platforms, zero AI slop. Compatible with OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf. BugReaper is an Agent Skill that turns any compatible AI agent into a disciplined web2 bug bounty hunter. It...
sectemplates
Sectemplates Me complace anunciar la creación de SecTemplates.com, un sitio web donde profesionales de la seguridad informática y equipos de ingeniería de startups que carecen de un equipo de seguridad pueden encontrar plantillas para ayudar a impulsar sus programas. El enfoque principal de este...
dora
dora Features Blazing fast as we are using ripgrep in backend Exploit/PoC steps for many of the API key, allowing to write a good report for bug bounty hunting Unlike many other API key finders, dora also shows the path to the file and the line with context for easier analysis Can easily be...
nuvola
nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...
pocs
pocs publicaremos pocs en este repositorio todos los bugs en este repositorio se divulgan de forma responsable...
TOP
TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things Table of Contents 2026 year top total 30 2025 year top total 30 2024 year top total 30 2023 year top total 30 2022 year top total 30 2021 year top total 30 2020 year top total 30 2019 year top total 30 2018 year top...
GitMonitor
GitMonitor GitMonitor Una forma de monitorear continuamente información sensible que podría estar expuesta en Github Resumen Sé que hay muchas otras herramientas disponibles para encontrar información sensible actualmente filtrada en Github, yo mismo todavía uso algunas de ellas. Sin embargo, cre...
FavFreak
FavFreak - Weaponizing favicon.ico for BugBounties , OSINT and what not Detailed Description about this can be found here : Read Blog here : https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139 Introduction I have created this tool for making my wor...
NoXss
NoXss NoXss es un escáner de vulnerabilidades de cross-site scripting que soporta XSS reflejado y XSS basado en DOM. Es muy rápido y adecuado para probar millones de URLs. Ha encontrado algunas vulnerabilidades XSS en programas de Bug Bounty. Características Rápido y adecuado para probar millones...