2089 matches found
Eclipse Theia - Unauthenticated Path Traversal
Eclipse Theia's plugin-ext backend exposes the hostedPlugin endpoint without constraining the resolved path to the plugin directory. An unauthenticated request using encoded traversal sequences can therefore read files accessible to the backend process. The built-in vscodebat plugin identifier...
fisy-fuzz
FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...
cirro
Cirro is an extensible security research platform that enables researchers and penetration testers to collect, analyze, and visualize cloud environments and identity relationships through graph databases. Built with a modular architecture, Cirro can be extended to support multiple platforms and...
PT-2026-136105
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the sched ext scheduler subsystem, a race condition exists where tasks can be moved between dispatch queues DSQs while the dispatching CPU is still executing operations. Specifically,...
e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout
CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...' Backslash Breakout Proof of concept for CVE-2026-17543 CVSS 9.8 Critical, CWE-89, a SQL injection vulnerability in PHP's procedural PostgreSQL extension. Vulnerability Summary pginsert, pgselect, pgupdate, pgdelete, and pgconvert all rout...
SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker
terrapincheck.py A lightweight Python scanner for CVE-2023-48795 — the SSH Terrapin Prefix Truncation vulnerability. Terrapin is a protocol-level vulnerability in SSH that allows an attacker performing an active MitM to truncate the negotiated extension information, downgrading connection securit...
CVE-2024-2961
CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...
CVE-2016-5195
This record is for learning purposes only; any illegal use is prohibited. Principle The vulnerability works by concurrently flushing dirty pages, causing the content of a file that was originally read-only to be modified. If the modified file is owned by root and has the SUID permission, it can b...
PT-2026-134513
Name of the Vulnerable Software and Affected Versions WebDyne versions 2.031 through 3.021 Description WebDyne incorrectly identifies files as Perl pages if the string .psp appears anywhere in the filename. This occurs because the regular expression WEBDYNE PSP EXT RE used to determine if a file...
CVE-2026-6951
CVE-2026-6951 simple-git Remote Code Execution ★ CVE-2026-6951 simple-git --config Option Filter Bypass RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 Overview CVE-2026-6951 is a remote code execution vulnerability in simple-git caused by an incomplete f...
hestia-earth-extend-bibliography (>=0.2.0, <=0.6.0), invenio-accounts (>=0.1.2, <=0.2.0) +15 more potentially affected by CVE-2026-118669 via oauthlib (0.7.2)
oauthlib PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on oauthlib and may be impacted: - hestia-earth-extend-bibliography =0.2.0, =0.1.2, =0.1.0, =0.2.0, =0.2.2.dev20150825, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =0.7.3, =0.2.5,...
PT-2026-128097
In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scx bypass claims bypass dispatch when the scheduler's depth goes from zero to one and releases it when the depth returns to zero, but propagates onl...
PT-2026-128098
In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix stall when a task enqueued with SCX ENQ LAST lands back on its CPU's local DSQ With SCX OPS ENQ LAST, the last runnable task on a CPU is passed to ops.enqueue instead of being kept running. Exiting tasks without SC...
PT-2026-128137
In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue A deferred reenqueue can read a freed user DSQ. The request stays on its CPU's deferred list until run deferred takes it, and the RCU callback that fre...
PT-2026-127230
Name of the Vulnerable Software and Affected Versions russh versions prior to 0.65.0 Description The client Session::process packet path in russh/src/client/encrypted.rs accepts repeated packets encoded with the private msg::EXT INFO = 7 before authentication. The handle ext info function appends...
GitPython CVE-2022-24439 ext URL RCE
CVE-2022-24439 GitPython = 3.1.29: malicious ext::sh clone URL runs shell commands when an HTTP app passes user input to clonefrom with protocol.ext.allow=always. !/usr/bin/env python3 -- coding: utf-8 -- """GitPython CVE-2022-24439 ext:: transport RCE via clone URL injection.""" from future impo...
Malware in @drone-js-ext/core
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @drone-js-ext/vip-badge
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
