Critical: Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

cve-2017-12615

cve-2017-12615...

PentesterLab-Intercept-CVE-2014-1266

This repository does not have a README...

MGASA-2026-0383 Updated freerdp packages fix security vulnerabilities

Updated packages bring lot of security fixes. Please see the links for additional information...

Updated freerdp packages fix security vulnerabilities

Updated packages bring lot of security fixes. Please see the links for additional information...

semgrep-rules

Reglas públicas de Semgrep de Trail of Bits Este repositorio contiene reglas de Semgrep desarrolladas por Trail of Bits y puestas a disposición del público. Forman parte de nuestros esfuerzos de desarrollo continuo y se utilizan en nuestras auditorías de seguridad, investigación de vulnerabilidad...

CVE-2019-9849

CVE-2019-9849：LibreOffice 在“隐身模式”下获取远程项目符号图形 LibreOffice 具有一种“隐身模式”，在该模式下，仅允许从被视为“受信任”的位置获取远程资源。 该模式并非默认模式，但希望禁用 LibreOffice 在文档中包含远程资源功能的用户，可以启用该模式。 在 6.2.5 版本之前存在一个缺陷：项目符号图形被遗漏在此保护范围之外。 HTML 标签| HTML 属性| 打开时触发| 保存/导出时触发 ---|---|---|--- ol| src| 否| 是 ul| src| 否| 是 厂商披露： 该漏洞的厂商披露可在此处查看。 概念验证：...

CVE-2026-46300

⚠️ 安全研究与法律免责声明 📌 本仓库的目的 本仓库严格仅供 教育、学术及授权的网络安全研究 使用。 其目的在于帮助理解： 受控环境中的安全漏洞与利用概念 沙箱隔离机制及其局限性 安全软件设计与防御性安全实践 🚫 仅限授权使用 本仓库仅可在已获得明确许可的环境中使用，例如： 个人或受控虚拟机 Docker 或隔离的实验环境 授权的渗透测试项目 学术或网络安全培训场景 任何在授权环境之外的使用均被严格禁止。 ⚖️ 不承担责任 / 无赔偿责任 本仓库的作者及贡献者 不承担、不负责任、不负责 因使用、滥用或分发本项目或其内容而导致的任何误用、损害、损失或法律后果。 使用本仓库即表示您承认：...

psychic-signatures

CVE-2022-21449：Java 中的心灵签名...

CVE-2024-38821-POC

CVE-2024-38821：概念验证（PoC）：Spring Framework 中的认证绕过 这是针对 CVE-2024-38821 漏洞的概念验证 执行步骤 1. 构建 Docker 镜像（基于 Spring Framework 6.1.13 的 Spring Boot 3.3.4） root@kitploit: cd vuln docker build -t cve-2024-38821-poc . 2. 运行容器并将主机的端口 8080 暴露给容器 root@kitploit: docker run -d -p 8080:8080 --name cve-2024-38821-p...

CVE-2026-48907

CVE-2026-48907 - Prueba de Concepto PoC ⚠️ Descargo de responsabilidad Este repositorio se crea únicamente con fines educativos y de investigación en seguridad. El autor no aprueba ni respalda ningún uso no autorizado o malintencionado de este código. Úselo solo en entornos donde tenga permiso...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2021-25162

CVE-2021-25162 CVE-2021-25162...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

presentations

Mis presentaciones Se pueden encontrar más cosas en mi sitio personal: https://sites.google.com/site/zhiniangpeng root@kitploit: Explotando vulnerabilidades de RCE de preautenticación y escape de sandbox en EXSi, Typhooncon 2023 Los objetos OLE siguen siendo peligrosos hoy en día — Explotando...

[SECURITY] Fedora 44 Update: libsoup3-3.6.6-10.fc44

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 44 Update: corosync-3.1.10-6.fc44

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

[SECURITY] Fedora 44 Update: libre-4.11.0-1.fc44

Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack RFC 3261, SDP, RTP and RTCP, SRTP and SRTCP Secure RTP, DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O poll, epoll, select, kqueue,...

[SECURITY] Fedora 44 Update: baresip-4.11.0-1.fc44

A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, GSM, L16 and Opus, audio drivers like ALSA, GStreamer, JACK Audio...

[SECURITY] Fedora 44 Update: perl-Net-OAuth-0.33-1.fc44

Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...