rsync: rsync: Heap Out-of-Bounds Write via crafted argument list

A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...

CVE-2026-17156

CVE-2026-17156 affects IBM App Connect Enterprise (versions 13.0.1.0–13.0.8.0 and 12.0.1.0–12.0.12.27), allowing a local attacker with no privileges to execute arbitrary code through insecure deserialization (CWE-502). The attack requires user interaction and yields full compromise of confidentia...

CVE-2026-17416 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

EUVD-2026-77783

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

CVE-2026-17416

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.0 and 12.0.1.0 through 12.0.12.27 are vulnerable to arbitrary code execution by a local attacker due to insecure deserialization (CWE-502). The IBM security bulletin groups this CVE with two additional vulnerabilities: CVE-2026-17133 (OS...

CVE-2024-32002

CVE-2024-32002 一个简单的概念验证，执行计算器（仅限 macOS 示例）。使用 git clone --recursive 命令时，此仓库还会拉取 https://github.com/markuta/hooky，其中包含一个 post-checkout 脚本。主要基于修复提交 t7406-submodule-update.sh 文件。 运行 注意 ：低于 2.45.1、2.44.1、2.43.4、2.42.2、2.41.1、2.40.2 和 2.39.4 的版本均受影响。 root@kitploit: git clone --recursive...

CVE-2023-27326

Parallels Desktop 虚拟机逃逸 该仓库包含针对 Parallels Desktop 漏洞（编号 CVE-2023-27326）的利用代码。此漏洞允许本地攻击者在受影响的 Parallels Desktop 安装实例中提升权限。 该利用代码已在 Parallels Desktop 18.0.0 53049 版本上测试通过，该漏洞已在 18.1.1 53328 安全更新 中被修复。 漏洞详情 具体缺陷存在于 Toolgate 组件中。问题源于在使用用户提供的路径进行文件操作之前，缺乏对路径的正确验证。攻击者可利用此漏洞提升权限，并在主机系统上当前用户的上下文中执行任意代码。...

CVE-2020-12753-PoC

CVE-2020-12753-PoC 本仓库包含 🔋📱❄️🥾🔓 的概念验证（PoC），这是一个 SBL1/aboot 漏洞，可在 LG Stylo 4（AMZ/Q710ULM）上实现 Secure EL3 任意代码执行。该 PoC 仅在 20a 和 20c 更新上测试过，且仅针对该漏洞的 SBL1 变体。 root@kitploit: - Makefile : 根据 sblrop.s 和 rawresources.img884736 构建 rawresourcesamod.img - rawresources.img884736 : 原始 rawresources 分区；sha256...

nginx:1.26 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:67283 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

CVE-2024-4947-PoC

CVE-2024-4947 — V8 Maglev 类型混淆 → 完整 RCE（d8 PoC） 一个针对 CVE-2024-4947 （V8 Maglev 类型混淆）的完整、自包含利用链，从最初的类型混淆触发一直到 任意代码执行 。该 PoC 针对 非沙箱 的 d8 构建运行，并向 stdout 打印 CVE-2024-4947-PWNED 作为代码执行的证明。 ⚠️ 这是一个针对 已修补、公开 漏洞的 研究 / 教育 用途 PoC。 它针对的是 V8 shell（d8 --allow-natives-syntax）的开发构建 — 而非 真实的 Chrome 浏览器。参见 免责声明。...

CVE-2023-27326

Parallels Desktop VM エスケープ このリポジトリには、CVE-2023-27326 として割り当てられた Parallels Desktop の脆弱性に対するエクスプロイトが含まれています。この脆弱性により、ローカルの攻撃者は影響を受ける Parallels Desktop のインストール環境で権限を昇格できます。 このエクスプロイトは Parallels Desktop バージョン 18.0.0 53049 でテストされ、脆弱性は 18.1.1 53328 の セキュリティアップデート で修正されました。 脆弱性の詳細 具体的な欠陥は Toolgate...

CVE-2026-2796-escape-wasm-by-using-wasm

CVE-2026-2796 — SpiderMonkey WebAssembly 沙箱逃逸 针对 CVE-2026-2796 的概念验证（PoC）利用链，该漏洞是 Mozilla SpiderMonkey 的 WebAssembly 导入优化（“JavaScript: WebAssembly”组件）中的 JIT 错误编译/类型混淆。精心构造的 wasm 模块可获得对整个宿主进程的任意读写 以及任意原生代码执行 能力，从而逃逸 WebAssembly 沙箱。 CVE： CVE-2026-2796（CWE-843，类型混淆） 受影响： Firefox && +...

CVE-2025-64512

CVE-2025-64512 在 pdfminer.six 中通过精心构造的 PDF 输入执行任意代码的 PoC 基于 https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-wf5f-4jwr-ppcp % python3 mkpickle.py 用法：mkpickle.py 输出文件 例如：mkpickle.py 'curl IP:端口/rce' evil.pickle.gz % python3 mkpdf.py -h 用法：mkpdf.py -h -o 输出 -p 路径 -f picklename 创建触发...

CVE-2022-20186_CTXZ

CVE-2022-20186 漏洞利用 详细分析可在此处找到：here。这是 Arm Mali 内核驱动程序中的一个漏洞，我于 2022 年 1 月提交报告。该漏洞可用于从未受信任的应用域获得任意内核代码执行权限，进而禁用 SELinux 并获取 root 权限。 该漏洞利用已在 Google Pixel 6 上测试，支持从 2021 年 11 月到 2022 年 2 月的补丁级别。通过更改几个镜像偏移量，可以轻松添加对其他固件的支持。作为参考，我使用以下命令在 ndk-21 中通过 clang 编译： root@kitploit:...

CVE-2025-24890

A flaw was found in gix-sec. On Windows, an elevated administrator running a program that uses gix-sec may incorrectly trust repositories controlled by another user. This bypasses security protections, allowing repository configurations or hooks to execute commands with the administrator's...

CVE-2021-40870

CVE-2021-40870 Exploitation An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal. Modules need to Install...

DEBIAN-CVE-2026-90947

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

Moderate: Red Hat Security Advisory: nginx:1.24 security update

An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...