Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfreject: Do not leak the destination refcount for loopback packets. Recent patches that added a warning when replacing the skb dst entry fixed an old bug. WARNING: include/linux/skbuff.h:1165 – skbdstcheckunset...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: set exceptionirqentry with irqentry as a default filterirqstacks is supposed to cut entries which are related irq entries from its call stack. And inirqentrytext which is called by filterirqstacks uses irqentrytextstart/en...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush the cache for the PASID table before using it. When writing the address of a newly allocated, zero-initialized PASID table to a PASID directory entry, do so after flushing the CPU cache for this PASID table, not...

secveri-cve-2026-50011-negative

This repository does not have a README...

CVE-2024-33209

CVE-2024-33209 FlatPress 1.3. is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser. Vulnerability Type: Cross Site Scripting XSS Vendor of...

CVE-2020-2978

CVE-2020-2978 CVE-2020-2978 refrence link for PoC: https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/...

CVE-2025-25460

FlatPress CMS Stored XSS in v1.3.1 CVE-2025-25460 Author: Athul S Description A stored Cross-Site Scripting XSS vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts...

ghidra-firmware-utils

Ghidra Firmware Utilities Various modules for Ghidra to assist with PC firmware reverse engineering. This was accepted as a coreboot project for GSoC 2019. Features PCI option ROM loader Implements a FS loader for PCI option ROMs handles hybrid ROMs with multiple images, e.g. legacy x86 + UEFI...

cve-2020-27955

this is cve-2020-27955 test...

cve

cve...

Driver-HideKernelThread-IoCancelIrp

Driver-HideKernelThread-IoCancelIrp 自分のコードではない。保存用のみ https://bbs.pediy.com/thread-272795.htm 原理 スレッドのエントリアドレスをIoCancelIrpに、コンテキストを作成したirpに設定する。 するとスレッドはIoCancelIrpを呼び出す。呼び出されると、IRPをキャンセルする操作を実行する。 これによりIRP-CancelRoutineが呼び出される。したがって、自身のスレッドエントリアドレスをIRP-CancelRoutineに設定するだけでよい。 検出方法は？...

CVE-2026-104449

YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existing wiki page, including pages whose write ACL restricts editing, via the Bazar entry-creation flow. Attackers can submit a crafted entry with an attacker-controlled idfiche...

CVE-2026-104449

Versions of YesWiki prior to 4.6.7 are susceptible to an access control vulnerability (CWE-639) within the Bazar entry-creation flow . This flaw allows unauthenticated attackers to overwrite any existing wiki page—even those protected by write ACLs—by submitting a crafted entry where the attacker...

EUVD-2026-91460

YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existing wiki page, including pages whose write ACL restricts editing, via the Bazar entry-creation flow. Attackers can submit a crafted entry with an attacker-controlled idfiche...

EUVD-2026-91456

YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the verified HTTP signature signer to the activity actor. Unauthenticated attackers with any ActivityPub keypair can send signed Delete or Update activities referencing a mirrored...

DotNET_XorCryptor

DotNET XorCryptor You can also pay attention to an older project - NET-MalwareCryptor This is a .NET executable packer with payload encryption. Use for educational purposes only. How to use? --file path - specify file name --flood - add junk classes to file --proxy - move original entry point to...

PT-2026-104259

YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existing wiki page, including pages whose write ACL restricts editing, via the Bazar entry-creation flow. Attackers can submit a crafted entry with an attacker-controlled id fiche...

CVE-2026-104449: Authorization Bypass Through User-Controlled Key

YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existing wiki page, including pages whose write ACL restricts editing, via the Bazar entry-creation flow. Attackers can submit a crafted entry with an attacker-controlled idfiche...

CVE-2026-39902

脆弱性レポート: 認証済みRCEデータ入力 研究者: K | 製品: Cacti ≤ 1.2.30 01 脆弱性概要 フィールド| 値 ---|--- 製品| Cacti — RRDtoolベースの完全なグラフ作成ソリューション 影響を受けるバージョン| ≤ 1.2.30 脆弱性タイプ| OSコマンドインジェクション CWE-78 攻撃ベクトル| ネットワーク 認証済み管理者 認証| 必要 — 管理者アカウントが必要 対象OS| Windows 両ベクトル + Linux 直接 inputstring ベクトル CVSSv3.1スコア| 7.2 HIGH ベクトル|...

BIT-PHP-MIN-2026-6103 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...