PT-2026-84343

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84329

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84344

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84345

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84319

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84320

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84212

Name of the Vulnerable Software and Affected Versions ControlFLASH versions 15.07 and earlier Description The installer grants write permissions to the Everyone group on the product installation directory. This flaw allows for arbitrary code execution, enabling an attacker to run any commands or...

PT-2026-84225

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An authenticated user with limited privileges can exploit a code injection flaw to execute arbitrary code with root privileges. Code injection is a type of attack where an attacker...

PT-2026-84227

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers versions 4.49.0 through 5.8.1 Description A consent-bypass issue exists where remote Python files are written to the local disk without user consent. This occurs when using the load custom generate function, which...

CVE-2025-59287

En este estudio, examinaremos una vulnerabilidad crítica CVE-2025-59287 descubierta en el entorno de Microsoft Windows Server Update Services WSUS. Esta vulnerabilidad surge de la deserialización insegura de objetos AuthorizationCookie enviados al endpoint GetCookie, donde los datos cifrados de l...

Analysis-for-stage1-shellcode-loader-from-hacking-

تحليل لمحمّل شيلكود المرحلة الأولى من Hacking Team مخطط انسيابي للكود مؤشرات الاختراق IoC للشبكة https://172\.20\.20\.164 root@kitploit: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0;...

Browser-Pwning-

Browser-Pwning A proper well structured documentation for getting started with chrome pwning & v8 pwning Structure of document How this doc is organised 1. Motivation 2. Actual Study Material Motivation Browsers are one of today’s most used pieces of technology. On every off the shelf computer, i...

kern

kern: A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. A real, kernel-enforced container in 3.5 ms, out of one 1.52 MB binary with no daemon. 0 RAM at rest · no daemon, no socket, nothing to start · one static binary, libc its only...

cve-2025-20333

CVE-2025-20333 - Kit de Investigación y Explotación Completo Descripción General Este directorio contiene investigación exhaustiva, análisis y código de prueba de concepto para CVE-2025-20333 , una vulnerabilidad crítica de desbordamiento de búfer en la pila en servidores WebVPN de Cisco ASA/FTD...

CVE-2025-59528

Version francaise CVE-2025-59528 Proof of Concept Minimal PoC focused on technical validation of the vulnerability in an authorized environment. Prerequisites You must have a user account on the target Flowise dashboard. You must have a valid API key linked to that account. You must start a...

CVE-2026-82222

CVE-2026-82222 — GiveWP Autor: Rx019 CVSS: 10.0 Crítico Tipo: Inyección de Objetos PHP No Autenticada → Ejecución Remota de Código Plugin: GiveWP give — Plugin de Donaciones y Plataforma de Recaudación de Fondos Afectado: Parcheado: 4.16.8 Descripción GiveWP almacena el lastname de un donante en ...

HavocPwn

Havoc-PWN Autenticado Esta cadena SSRF-RCE fue inspirada por el POC SSRF de CVE-2024-41570 de chebuya y el Havoc Auth RCE de IncludeSecurity; ambos exploits son increíbles y están muy bien elaborados, ¡por favor den a estos creadores el reconocimiento por su arduo trabajo! chebuya hyperreality...

CVE-2018-14667_Lab_POC

CVE-2018-14667-Lab POC pour l'exploitation de CVE-2018-14667 PRÉREQUIS Application de démonstration depuis : http://downloads.jboss.org/richfaces/releases/3.3.X/3.3.4.Final/richfaces-examples-3.3.4.Final.zip Jboss 5.1.0.GA depuis l'archive de téléchargement JBOSS :...

CVE-2026-24061-POC

CVE-2026-24061 - PoC de Bypass de Autenticación en telnetd Bypass de autenticación crítico en telnetd que conduce a RCE como root Afecta a sistemas cuyas versiones de telnetd contienen la vulnerabilidad desde 2015 en adelante Acerca de Este PoC demuestra CVE-2026-24061 , una vulnerabilidad crític...

copy_fail

copyfail Research Notes CVE-2026-31431 English 简体中文 This repository is a defensive research workspace for studying the Linux copyfail vulnerability tracked as CVE-2026-31431. The goal of this repository is to preserve analysis notes, document impact, and support safe local assessment. It is not...