EUVD-2026-92529

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

CVE-2024-4947-PoC

CVE-2024-4947 — Type Confusion in V8 Maglev → RCE completo d8 PoC Una catena di sfruttamento completa e autonoma per CVE-2024-4947 type confusion in V8 Maglev, dal trigger iniziale di type confusion fino all'esecuzione arbitraria di codice. Il PoC viene eseguito su una build non sandboxed di d8 e...

Quartz-1

To compile: % mvn install -DskipTests Note: a. the final Quartz jar is found under quartz/target b. if you don't have Oracle and/or Weblogic third party libraries jars required for compilation these can't be found on public Maven repos due to licensing you can comment out those modules under the...

CVE-2018-6574

CVE-2018-6574 Esecuzione remota di comandi nel comando go get di Golang. CVE-2018-6574 questa vulnerabilità colpisce il comando go get di Golang e consente a un attaccante di ottenere l'esecuzione di codice su un sistema installando una libreria dannosa; questa vulnerabilità è stata corretta in G...

CVE-2024-3094_xz_check

Script di verifica CVE-2024-3094 per xz Questo repository contiene uno script Bash e un comando monorighello per verificare se un sistema sta eseguendo una versione vulnerabile dell'utility "xz", come specificato da CVE-2024-3094. Vedi la descrizione e la dichiarazione d'impatto qui sotto dalle...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

CVE-2020-1034

CVE-2020-1034 PoC che dimostra l'uso di CVE-2020-1034 per l'escalation dei privilegi. Testato su Windows 10 2004 non aggiornato, build 19041.488. La vulnerabilità è stata scoperta da Microsoft e corretta nel patch Tuesday dell'8/9/2020:...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: qca: fixed an issue where information was leaked when fetching the fw build id. Added missing sanity checks and moved the 255-byte build-id buffer off the stack to prevent the leakage of stack data through debugfs, ...

Astra Linux – Vulnerability in Golang-1.19

The “//line” directive can be used to bypass the restrictions on the “//go:cgo” directives, allowing for the passing of blocked linker and compiler flags during compilation. This can lead to the execution of arbitrary code when running “go build”. The “//line” directive requires the absolute path...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Ensure that the internal and UAPI bpfredirect flags do not overlap. The bpfredirectinfo is shared between the SKB and XDP redirection paths. Both paths use the same numerical flag values in the ri-flags field specifically,...

Astra Linux – Vulnerability in Node.js

Certain build processes for libuv and Node.js for 32-bit systems, such as the nodejs binary package through nodejs20.19.0+dfsg-2i386.deb for Debian GNU/Linux, have inconsistent offt size settings. For example, when building on the i386 architecture for Debian GNU/Linux, FILEOFFSETBITS=64 is alway...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: mISDN: Fixed a memory leak in dsppipelinebuild. dsppipelinebuild allocates a dup pointer using kstrdupcfg, but then it updates the dup variable using strsep&dup, “|”. As a result, when it calls kfreedup, the dup variable...

Astra Linux – Vulnerability in Golang-1.19

The go command may execute arbitrary code during compilation when using cgo. This can occur when running “go get” on a malicious module, or when running any other command that compiles unauthorized code. This issue can be triggered by linker flags, specified via the cgo LDFLAGS directive. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvmet-tcp: bounds checks were added in nvmettcpbuildpduiovec. The nvmettcpbuildpduiovec function could exceed the range of cmd-req.sg when the PDU length or offset exceeds sgcnt, and then use absurd values for sg-length/offset...

CVE-2026-33017

CVE-2026-33017 - Langflow Unauthenticated RCE ⚠️ DISCLAIMER: This repository is for authorized security testing and educational purposes only. Use only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this tool. Overview...

libunwind_CVE-2015-3239_After

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

CVE-2025-26399

CVE-2025-26399 Come funziona questo metodo di rilevamento? Questo script rileva le istanze di SolarWinds Web Help Desk vulnerabili a CVE-2025-26399 richiedendo la pagina di login di Helpdesk, confermando gli identificatori del prodotto nella risposta, estraendo il token di build incorporato come...

xz-backdoor-research

Toolkit di Ricerca CVE-2024-3094 Di Nikolaos Natsopoulos , Consulente IAM Strumento interattivo basato su browser che accompagna il report di ricerca: "CVE-2024-3094: Compromissione della Supply Chain tramite Ingegneria Sociale e Manipolazione del Sistema di Build in XZ Utils"...

CVE-2026-43284-Dirty-Frag

CVE-2026-43284 Dirty Frag Exploit precompilato per CVE-2026-43284 Dirty Frag. Codice sorgente originale da V4bel/dirtyfrag. Compilazione make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Download Scarica i binari precompilati dalla pagina Releases...

MAL-2026-17610 Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...