Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and...

HashcatRosetta

| | | | | | | || \ | || | | || |/ / | ' \ / / | | | / / |/ \ | / | | | | \ \ | | | | | | || \ \ / || || | | || ||,|/| ||\,||| \/|/||\,| Decode the Rosetta Stone of Password Cracking Rules HashcatRosetta A Python project designed to analyze hashcat debug mode 4 and mode 5 output files to...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

CVE-2024-9014

This post is a research article published by EQSTLab. CVE-2024-9014 ★ CVE-2024-9014 Sensitive Information Exposure PoC ★ Description CVE-2024-9014 : pgAdmin4 Sensitive Information Exposure description: pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication...

PPPwn

PPPwn - PlayStation 4 PPPoE RCE PPPwn is a kernel remote code execution exploit for PlayStation 4 up to FW 11.00. This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation. Supported versions are: FW 7.00 / 7.01 / 7.02 FW 7.50 / 7.51 / 7.55 FW 8.00 / 8.01 /...

Redis-RCE

redis-rce Redis 4.x/5.x RCE Usage usage: redis-rce.py -h -r RHOST -p RPORT -L LHOST -P LPORT -f FILE -a AUTH -v Redis 4.x/5.x RCE with RedisModules optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST target host -p RPORT, --rport RPORT target redis port, default...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Affected versions VMware View Planner Harness 4.X Similar to CVE-2021-21978, this vulnerability allows uploading arbitrary files without authentication, and achieving remote code execution by modifying the built-in py script. It is worth noting that commands...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

ddos-reduction-system

FLOD System First Line Of Defense An adaptive two stage Layer 4 volumetric DDoS mitigation gateway. Author: Abdullah Armiyao Project: Adaptive Two Stage Framework for Near Real Time Layer 4 Volumetric DDoS Mitigation Using Behavioral Traffic Analysis What It Does Most DDoS mitigation uses fixed...

CVE-2025-2945-pgAdmin-RCE

CVE-2025-2945 — pgAdmin 4 Authenticated Query Tool RCE CVSS 3.1: 9.9 Critical · Affects: pgAdmin 4 8.10 – 9.1 · Fixed in: 9.2 April 4, 2025 CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code / Eval Injection A proof-of-concept exploit for CVE-2025-2945, an authenticated...

CVE-2026-12948

CVE-2026-12948 Vulnerability Summary A stored cross-site scripting XSS vulnerability was identified in the web management interface of the Digi PortServer TS 4 H MEI. A specially crafted, authenticated request allows a script payload to be permanently written to device configuration storage. The...

CVE-2026-31431-Analysis-and-Fix

CVE-2026-31431 "Copy Fail" — Technical Deep Dive Severity: CVSS 7.8 High Class: Local Privilege Escalation Introduced: Linux 4.14 2017 Fixed: commit a664bf3d603d 1. Background CVE-2026-31431 is a local privilege escalation flaw in the Linux kernel's algifaead module — the AEAD socket interface of...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC A remote code execution PoC for the pgAdmin 4 Import/Export Data tool. It exploits the divergence in backslash escaping semantics between the isqueryparensbalanced parenthesis checker and psql to inject \copy ... TO PROGRAM and execute arbitra...

CVE-2026-63223

CVE-2026-63223 — CodeIgniter 4 File Upload RCE Magic Bytes Bypass → isimage/mimein → PHP Webshell → RCE Overview CVE-2026-63223 is a critical-severity CVSS 9.8 unauthenticated remote code execution vulnerability in CodeIgniter 4 , a PHP full-stack web framework, affecting versions prior to 4.7.4...

CLSA-2026-1792077762 TuxCare security update for org.springframework.amqp (4 CVEs)

TuxCare rebuilt 5 org.springframework.amqp packages to address 4 CVEs. Fixed in 2.3.6-tuxcare.1...

CLSA-2026-1792077747 TuxCare security update for org.springframework.amqp (4 CVEs)

TuxCare rebuilt 4 org.springframework.amqp packages to address 4 CVEs. Fixed in 2.3.10-tuxcare.1...

os-experiment-4

os-experiment-4 os experiment 4 CVE-2016-5195 ./run.sh...

ssbd-tools

Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...

CVE-2014-4322_adaptation

CVE-2014-4322adaptation Just an attempt to adapt for Note 4, I do not know what I am doing. There is currently a way to write to system using ADB CVE-2014-7951 and CVE-2014-7953. zxz0O0 has confirmed writing to system works. What we needed was to gain System UID to execute CVE-2014-4322. I am...

world_conqueror_4_ru

World Conqueror 4 — русский перевод и мод CMake-пайплайн: распаковывает оригинальный APK, применяет патчи и собирает подписанную русскую сборку игры. Что это Из оригинального APK World Conqueror 4 собирается русская сборка: игра декомпилируется, ресурсы расшифровываются, применяются выбранные...