EUVD-2026-66503

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec "mptcp: borrow forward memory from subflow", errors in the receive path prior to queueing skbs into the receive queue do not trigger...

CVE-2026-31908

CVE-2026-31908 - Apache APISIX ヘッダーインジェクションエクスプロイト 📋 概要 これは CVE-2026-31908 の 概念実証（PoC） エクスプロイトです。Apache APISIX のバージョン 2.12.0 から 3.15.0 で発見された、重大なヘッダーインジェクションの脆弱性です。 この脆弱性は forward-auth プラグインに存在し、CRLF（\r\n）シーケンスの不適切なサニタイズにより、認証されていない攻撃者が悪意のある HTTP ヘッダーを注入できるようになります。これにより、、、保護されたリソースへのが発生する可能性があります...

cve-2022-31692

CVE-2022-31692 演示 概述 一个简单的 Spring Boot 应用程序，演示了一种存在 CVE-2022-31692 漏洞的配置。 该漏洞因其严重性而备受关注——它的 CVSS 3.x 基础评分为 9.8，因为它允许身份验证绕过。 本项目的目的是演示安全公告中描述的、导致该漏洞成立的条件。 应用程序期望 Spring Security 对 forward 和 include 调度器类型应用安全机制。 应用程序手动使用 AuthorizationFilter，或通过 authorizeHttpRequests 方法使用。 应用程序将 FilterChainProxy...

DFShell

root@kitploit: ██████╗ ███████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██║ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝...

gtunnel

Documentation can be found at: https://hotnops.gitbook.io/gtunnel/...

iox

iox Englisch | 中文 Werkzeug für Portweiterleitung & Intranet-Proxy, ähnlich wie lcx/ew, aber besser Warum schreiben? lcx und ew sind großartig, aber sie könnten verbessert werden. Als ich sie zum ersten Mal benutzte, konnte ich mir diese komplizierten Parameter lange nicht merken, wie tran, slave,...

CVE-2026-80588

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec "mptcp: borrow forward memory from subflow", errors in the receive path prior to queueing skbs into the receive queue do not trigger...

CVE-2026-80588 mptcp: reclaim forward-allocated memory on RX path errors

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec "mptcp: borrow forward memory from subflow", errors in the receive path prior to queueing skbs into the receive queue do not trigger...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CVE-2026-72924

GitHub CLI (gh) versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default, rather than restricting it to loopback. This exposes the forwarded Codespaces service through a wildcard-bound listener on the user's local ...

CVE-2026-72924 GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

CVE-2026-72924 GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

spamscanner

Spam Scanner is the best anti-spam, email filtering, and service...

bluffs

BLUFFS Introduzione Questo repository contiene codice relativo a BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. Abstract dell'articolo Bluetooth è una tecnologia pervasiva per la comunicazione wireless. Miliardi di dispositivi lo utilizzano in applicazioni sensibili e per...

CVE-2026-41844

CVE-2026-41844...

FShell

FShell Descrição FShell é a minha implementação de um Forward Shell. Foi projetado para obter um tty interativo usando execução remota de código através de um protocolo sem estado ex: HTTP. Por que devo usar um forward shell? O servidor remoto não consegue acessar a internet, sem possibilidade de...

CVE-2026-44687

An off-by-one error in Unbound's default harden-below-nxdomain logic can lead to a denial of service. When an intermediate label under a DNSSEC-signed zone is queried, the flaw incorrectly bypasses configured stub or forward zones, disrupting their name resolution. Mitigation Disable the...

UBUNTU-CVE-2026-72293

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radixtreepreload in gaccessshadowfault Add missing radixtreepreload in gaccessshadowfault to guarantee forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order ...