CVE-2024-33298

CVE-2024-33298 Vulnerabilidad de Cross Site Scripting almacenado en Microweber = 2.0.9 Resumen : Una vulnerabilidad de Cross Site Scripting almacenado en Microweber v.2.0.9 permite a un atacante remoto ejecutar código arbitrario mediante la función de crear nueva copia de seguridad en el endpoint...

mora-hwbp

Mora-HWBP — AMSI / WLDP / ETW Telemetry Hooking via Hardware Breakpoints A security-research Proof-of-Concept POC demonstrating hardware-breakpoint CPU debug register based function hooking as an alternative to traditional in-memory code patching. Purpose & Scope This repository is published...

fnprint

fnprint matches functions in binaries by what they do , not by what their bytes or control-flow graphs look like. it runs each function in a tiny emulator with made-up inputs, records the side effects it produces, and hashes that behavior into a fingerprint. two functions that behave the same get...

CVE-2026-97521 gfs2: fix quota init duplicate scan

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...

CVE-2026-97521 gfs2: fix quota init duplicate scan

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...

CVE-2026-97521

A bug in the Linux kernel 's gfs2 filesystem was identified where the gfs2_quota_init() function performed a duplicate quota ID check while holding the qd_lock and bucket bitlock . Specifically, the call to gfs2_qd_search_bucket() utilized lockref_get_not_dead(), which may sleep on PREEMPT_RT sys...

CVE-2026-14669

CVE-2026-14669 - Desbordamiento de búfer en montón en la abreviatura de zona horaria de tochar de PostgreSQL La función tochar de PostgreSQL presenta una vulnerabilidad de desbordamiento de búfer en el montón al procesar el formato de zona horaria. Un atacante puede provocar una escritura fuera d...

EUVD-2026-86203

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...

CVE-2026-93815

A vulnerability exists in the Linux kernel involving the au1000 driver. The au1000_close() function incorrectly calls free_irq() while holding the aup->lock spinlock. Because free_irq() can sleep while acquiring the desc->request_mutex , this violates kernel locking rules and triggers a Loc...

CVE-2026-93815 net: au1000: move free_irq out of the close-time spinlocked section

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...

CVE-2026-93815 net: au1000: move free_irq out of the close-time spinlocked section

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...

CVE-2026-22015-Serverless-Function-Environment-Variable-Injection-via-Event

CVE-2026-22015 – Inyección de variables de entorno en funciones serverless a través del evento Código del programa simulación de Python Lambda lambdaenvinject.py - Vulnerable function that reads env from event import os, json def handlerevent, context: The event contains environment variable...

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – Escritura Modbus TCP a Bobinas de Solo Lectura mediante Suplantación de Código de Función Código del Programa Python con simulación pymodbus modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from pymodbus.device import...

CVE-2026-51997

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 Spring-Cloud-Function-SpELRCE漏洞复现 需要有Docker环境 启动漏洞环境方式1 git clone https://github.com/RanDengShiFu/CVE-2022-22963.git;cd CVE-2022-22963;bash Start.sh 启动漏洞环境方式2 rm -rf CVE-2022-22963/;mkdir CVE-2022-22963/;cd CVE-2022-22963/;git clone...

CVE-2015-4870

CVE-2015-4870 MySQL DoS in the Procedure Analyse Function – CVE-2015-4870 Write-up: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/ Video: https://www.youtube.com/watch?v=zE-TsQVn9oI...

CVE-2025-47539

🚨 CVE-2025-47539 – WordPress Eventin 插件严重漏洞利用 🔥 漏洞摘要 WordPress 的 Event Manager, Events Calendar, Tickets, Registrations – Eventin 插件因 importitems 函数缺少授权检查，存在 未认证权限提升 漏洞。 🔓 受影响版本： ⚠️ 本脚本仅用于教育目的和专业安全评估。 ⚙️ 使用方法 usage: a.py -h -u URL Exploit for CVE-2025-47539 By Nxploited Khaled Alenazi options: -h,...

CVE-2022-22963

CVE-2022-22963-Exploit-de-Shell-Inversa Este es un script de Python que explota CVE-2022-22963, una vulnerabilidad de ejecución remota de código en Spring Cloud Function que permite a atacantes ejecutar código arbitrario en un servidor vulnerable. El exploit utiliza el endpoint vulnerable...

CVE-2025-0288

CVE-2025-0287 Este repositorio contiene una captura de pantalla de la función vulnerable identificada durante la ingeniería inversa de un controlador de Windows vulnerable. Descripción biontdrv.sysVul: versión vulnerable biontdrv.sysSecure: versión parcheada POCCVE-2025-0288.c: código de prueba d...

CVE-2026-8838-RCE

CVE-2026-8838 — Amazon Redshift Python Driver: Remote Code Execution via eval ⚠️ Educational Use Only Proyecto de investigación y demostración en ciberseguridad ofensiva realizado exclusivamente con fines pedagógicos y de sensibilización. Cualquier uso en sistemas sin autorización explícita es...