PT-2026-107390

src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH MSG KEX DH GEX GROUP 31 and SSH MSG KEX DH GEX REPLY 33 when a server receives them from an unauthenticated client. IsMessageAllowedServer applies no direction check to the key...

PT-2026-107564

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

PT-2026-107675

Four critical Argo CD vulnerabilities, including AppProject bypass CVE-2026-77459, threaten the repo-server and clusters. Upgrade to v3.5.4 now. ArgoCD Kubernetes GitOps CVE202677459 Kustomize Jsonnet DevSecOps Vulnerability https://t.co/QQRWdUYKFa...

Microsoft Exchange Server Elevation of Privilege (October 2026)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. CVE-2026-96940 Not...

Rocky Linux 9 [CIQ] Security Update: mariadb-connector-c / mariadb-connector-c-config / etc (crlsa-2026_75673)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202675673 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted th...

CVE-2023-20198

CVE-2023-20198 - PoC-скрипт /!\ Отказ от ответственности: Этот скрипт предоставляется «как есть» и исключительно в образовательных целях. Пользователям настоятельно рекомендуется соблюдать осторожность и использовать его в рамках действующего законодательства и этических норм. Описание Выполняет...

CVE-2023-45878

CVE-2023-45878 GibbonEdu Gibbon Exploit version 25.0.1 GibbonEdu Gibbon version 25.0.1 and before GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write Read More https://nvd.nist.gov/vuln/detail/CVE-2023-45878 https://herolab.usd.de/security-advisories/usd-2023-0025/ Disclaimer...

nextjs-CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 React2Shell - Next.js Remote Code Execution RCE PoC Critical vulnerability in Next.js Server Actions allowing unauthenticated Remote Code Execution via React Flight Protocol deserialization Overview This repository contains a Proof of Concept PoC for the critical R...

Script-For-CVE-2024-20666

Script-For-CVE-2024-20666 Automate updating the WinRE partition without having to resize it first and patch the CVE-2024-20666 BitLocker vulnerability. Microsoft Link Script found here Works for Windows Server 2022 Server Core installation KB5034439: Windows Recovery Environment update for Azure...

SOC335-CVE-2024-49138-Exploitation-Detected

SOC335 - Exploitation of CVE-2024-49138 Detected Summary This was one of the SOC lab exercises that I took on LetsDefend. The alert was about CVE-2024-49138. I investigated the alert, checked a suspicious hash on VirusTotal and searched the available logs for related activity. What I Did...

rbndr

rbndr Service simple de rebinding DNS rbndr est un serveur de noms très simple, non conforme, pour tester les logiciels contre les vulnérabilités de rebinding DNS. Le serveur répond aux requêtes en sélectionnant aléatoirement l'une des adresses spécifiées dans le nom d'hôte et en la renvoyant com...

CVE-2025-55182-react2shell

CVE-2025-55182: Детектор раскрытых React Server Components RSC Этот репозиторий содержит шаблон Nuclei для обнаружения раскрытия React Server Components , связанного с CVE-2025-55182. Уязвимость затрагивает приложения, построенные на React/Next.js, в которых уровень согласования RSC непреднамерен...

CVE-2019-15107

CVE-2019-15107 This is information about the CVE-2019-15107 Webmin vulnerability, including building a server and recording attack results...

cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

CVE-2016-4971

CVE-2016-4971 При перенаправлении сервера с HTTP на FTP-ресурс wget доверял HTTP-серверу и использовал имя из URL перенаправления в качестве имени файла назначения. Подробнее см. в посте в моём блоге. Использование На вашем сервере, node wget.js На вашем тестовом компьютере, wget...

CVE-2001-0932

CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Multiple Denial of Service Vulnerabilities 1 Exploit-db publication at https://www.exploit-db.com/exploits/21162/ CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Multiple Denial of Service Vulnerabilities 2 Exploit-db publication at...

CVE-2021-21349

CVE-2021-21349 XStream SSRF Официальное объявление XStream CVE-2021-21349 Уязвимость CVE-2021-21349: При десериализации unmarshalling с помощью XStream может быть активирована подделка серверного запроса Server-Side Forgery Request для доступа к потокам данных с произвольного URL-адреса,...

CVE-2026-106486

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...

CVE-2026-106458

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...