22170 matches found
MGASA-2026-0418 Updated gstreamer1.0-plugins-base packages fix a security vulnerability
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2026-18297...
Updated gstreamer1.0-plugins-base packages fix a security vulnerability
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2026-18297...
CVE-2023-46451
CVE-2023-46451 建议描述 Sourcecodester 最佳快递管理系统 v1.0 在更改用户名字段中存在跨站脚本攻击(XSS)漏洞。 附加信息 我在 YouTube 上更新了视频 POC:https://youtu.be/f8B3m5YfqI 漏洞类型 跨站脚本攻击(XSS) 受影响产品代码库 开源 受影响组件 更改用户名字段 攻击类型 远程 攻击向量 在用户名字段中上传 XSS 有效载荷 参考 https://youtu.be/f8B3m5YfqI 发现者 sajal jat...
cve-2022-4543-wrapper
cve-2022-4543-wrapper Introducción Este es un envoltorio del exploit CVE-2022-4543 de willsroot para ayudarte a determinar y obtener la dirección base del kernel. Cómo usar Compilar Según tu necesidad Opcional: root@kitploit: gcc dekaslr.c --static -o dekaslr g++ main.cpp --static -o main Para...
CVE-2022-0918
CVE-2022-0918 Red Hat CVE 页面: https://access.redhat.com/security/cve/cve-2022-0918 包含补丁链接的 Github issue: https://github.com/389ds/389-ds-base/issues/5242 PoC PoC 应用程序接受单个 IP,IPv4 或 IPv6 均可。 默认情况下,它会向端口 389 发送消息,可在源代码中更改。 PoC 将与目标建立 TCP 连接并发送单个数据包,目标 slapd 随后应发生段错误。 用法 root@kitploit: clang poc.c -...
framework_base_AOSP10_r33_CVE-2020-0391
Este repositorio no tiene un README...
enterpriseattack
enterpriseattack - Enterprise ATT&CK® de MITRE Un módulo de Python ligero para interactuar con el conjunto de datos Enterprise de MITRE ATT&CK. Diseñado para usarse en aplicaciones de producción debido a su velocidad y dependencias mínimas. Lea la documentación para más información. MITRE ATT&CK®...
process-enumeration-stealth
🚴 process-enumeration-stealth ¿Qué es esto? Este es un PoC simple que te permite devolver una lista de PIDs que están usando actualmente NTFS, consultando el dispositivo base \ntfs\ el objeto base del sistema de archivos de Windows. Utilizar este método evita la necesidad de usar APIs típicas, co...
base-lamp
BASE-LAMP Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/base-lamp Imagen basada en: https://github.com/Medicean/VulApps/tree/master/base/lamp...
base-joomla
BASE-JOOMLA Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Origen de la imagen: https://github.com/cved-sources/base-joomla Imagen basada en: https://github.com/Medicean/VulApps/tree/master/base/joomla/3.7...
CVE-2024-12558
CVE-2024-12558 WP BASE Booking of Appointments, Services and Events history.pushState'', '', '/'; document.forms0.submit;...
[SECURITY] Fedora 44 Update: sblim-cmpi-base-1.6.4-33.fc44
SBLIM Standards Based Linux Instrumentation for Manageability CMPI Common Manageability Programming Interface Base Providers for System-Related CIM Common Information Model classes...
[SECURITY] Fedora 43 Update: sblim-cmpi-base-1.6.4-31.fc43
SBLIM Standards Based Linux Instrumentation for Manageability CMPI Common Manageability Programming Interface Base Providers for System-Related CIM Common Information Model classes...
[SECURITY] Fedora 45 Update: sblim-cmpi-base-1.6.4-34.fc45
SBLIM Standards Based Linux Instrumentation for Manageability CMPI Common Manageability Programming Interface Base Providers for System-Related CIM Common Information Model classes...
Linux Distros Unpatched Vulnerability : CVE-2026-93130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module loa...
Linux Distros Unpatched Vulnerability : CVE-2026-93045
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject arena frees below the arena base bpfarenafreepages accepts scalar arena addresses. The runtime masks the address to the low 32 bits and reconstructs...
Linux Distros Unpatched Vulnerability : CVE-2026-93129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 platform/x86: dell-wmi: Recognise or support new...
Fedora 43 : sblim-cmpi-base (2026-fe1549bec3)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fe1549bec3 advisory. Use mktemp for temporary files in provider registration script CVE-2026-73585 Tenable has extracted the preceding description block directly from th...
Fedora 44 : sblim-cmpi-base (2026-7510dd645d)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7510dd645d advisory. Use mktemp for temporary files in provider registration script CVE-2026-73585 Tenable has extracted the preceding description block directly from th...
CVE-2026-76154
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin...