POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal Vulnerability 📝 Description PoC for CVE-2025-69194 , a critical Path Traversal vulnerability in GNU Wget2 = 2.2.0 verified on v1.99.1. This vulnerability allows attackers to achieve arbitrary file write or overwrite on the victim's filesystem by providing ...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA Arbitrary File Write 👨‍💻 Author Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2021-41579 - Arbitrary file write via malicious .els project file in LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Vulnerability Description CVE-2021-41579 is a client-side...

Commvault - SSRF via /commandcenter/deployWebpackage.do

A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center Innovation Release: 11.38. id: CVE-2025-34028 info: name...

OESA-2026-4093 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names a...

OESA-2026-4094 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names a...

OESA-2026-4092 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names a...

OESA-2026-4044 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup's WebSocket implementation when using the...

OESA-2026-4043 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup's WebSocket implementation when using the...

OESA-2026-4042 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup's WebSocket implementation when using the...

OESA-2026-4041 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup. The SoupWebsocketConnection may accept a large...

OESA-2026-4040 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup's WebSocket implementation when using the...

OESA-2026-4037 python-tornado security update

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. By using non-blocking network I/O, Tornado can scale to tens of thousands of open connections, making it ideal for long polling, WebSockets, and other applications that require a long-lived...

OESA-2026-4035 python-tornado security update

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. By using non-blocking network I/O, Tornado can scale to tens of thousands of open connections, making it ideal for long polling, WebSockets, and other applications that require a long-lived...

OESA-2026-4036 python-tornado security update

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. By using non-blocking network I/O, Tornado can scale to tens of thousands of open connections, making it ideal for long polling, WebSockets, and other applications that require a long-lived...

OESA-2026-4034 python-tornado security update

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. By using non-blocking network I/O, Tornado can scale to tens of thousands of open connections, making it ideal for long polling, WebSockets, and other applications that require a long-lived...

Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847

root@kitploit: Chrono-Drip: Temporal Viscosity Exploitation Framework CVE-2022-0847 Weaponization via Convergent Time Theory CTT ⚠️ DISCLAIMER FOR RESEARCH AND ACADEMIC PURPOSES ONLY This tool demonstrates the application of fundamental physics discoveries to cybersecurity. All work presented here...

Linux Distros Unpatched Vulnerability : CVE-2026-59980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input...

Debian dla-4796 : evolution-data-server - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4796 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/...

FragToken: Amplifying LLM Inference Costs through Noncanonical Token Generation

As large language model LLM inference becomes increasingly expensive, resource-consumption attacks pose a growing threat to model providers. Existing attacks typically amplify cost by inducing abnormally long or repetitive outputs on attacker-controlled or triggered requests, making them easier t...

AGATE: Provenance-Based Runtime Defense against Compositional Attacks on LLM Agents

LLM agents can produce harmful effects through sequences of ordinary operations. Judging such actions requires establishing both the authority that permits them and the origin of the data they carry. We present AGATE, an authorization and data-provenance gate at instrumented agent-harness...