Astra Linux – Vulnerability in Chromium

“Type Confusion in V8 in Google Chrome” before version 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, hsr: rejecting HSR frames if skb cannot hold the tag. Receiving an HSR frame with insufficient space to hold the HSR tag in the skb can result in a crash kernel BUG. 45.390915 skbuff: skbunderpanic:...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Linux, Linux 5.10

Rogue backends can cause Denial of Service DoS attacks on guests through high-frequency events. This CNA information record relates to multiple Common Vulnerabilities and Exposures CVEs; the text explains which aspects/vulnerabilities correspond to which CVEs. Xen allows for the execution of PV...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Уязвимость повреждения памяти нулевого дня в Google Chrome V8 🔥 Эксплуатируемый в реальных атаках нулевой день ⚡ Повреждение памяти движка V8 🛡️ Немедленно установите исправление 📖 Обзор ⚠️ CVE-2026-11645 — это уязвимость нулевого дня высокого уровня серьезности, затрагивающая...

wifi_leak

WiFi-баг - CVE-2018-4084 ZeroFest 2017 Среда протестировано на macOS High Sierra 10.13.1 протестировано на MacBook Pro Retina, 15-inch, Mid 2015 Ссылки https://support.apple.com/en-us/HT208465...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 Высокорискованная уязвимость CVE-2026-43499, реализация на ядре 5.10 и MediaTek MT6983V...

CVE-2026-105237

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...

CVE-2021-46079

CVE-2021-46079 Название эксплойта: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Автор эксплойта: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Ссылки: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

CVE-2024-9326-PoC

CVE-2024-9326 Script d'exploitation PoC Ce script PoC est conçu pour vérifier la présence de CVE-2024-9326, une vulnérabilité SQL Injection de haute criticité dans PHPGurukul Online Shopping Portal v2.0. Il automatise le processus d'exploitation pour déterminer si l'application web cible est...

PT-2026-104726

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...

CVE-2026-105237: Improper Restriction of Excessive Authentication Attempts

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

Rapport d'analyse de la vulnérabilité CVE-2025-14502 Résumé de la vulnérabilité Type de vulnérabilité : Inclusion locale de fichier Local File Inclusion, LFI Version affectée : News and Blog Designer Bundle 1.1 et toutes les versions antérieures Gravité : Élevée Complexité de l'attaque : Faible...

vulnerability-poc

취약점 PoC 저장소 고위험 CVE에 대한 엄선된 PoCProof-of-Concept 코드, 테스트 랩, 예방 규칙 모음 — 공인된 보안 테스트, 침투 테스트, CTF 챌린지, 보안 연구 를 위해 제작되었습니다. SeekersLab 팀이 관리합니다. 모든 항목에는 탐지 전용 PoC 스크립트, Docker 테스트 랩취약한 앱 + 패치된 앱, 이중 언어영어 / 한국어 문서, 즉시 배포 가능한 예방 규칙이 포함되어 있습니다. ⚠️ 면책 조항 이 코드는 교육 목적, 공인된 침투 테스트, CTF 챌린지 및 보안 연구 용도로만 제공됩니다...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center et Serveur Atlassian Score CVSS - 7.6 🔥 Description Cette vulnérabilité RCE Exécution de Code à Distance de sévérité élevée, identifiée CVE-2024-21689, a été introduite dans les versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 et 9.6.0 de Bamboo Data Center et...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Titre de l'exploit: Vehicle Service Management System - Téléchargement de fichiers 'Multiples' conduit à une injection HTML Auteur de l'exploit: SANU P.L CVE: CVE-2021-46079 CVSS : 7.2 ÉLEVÉ Références :...

CVE-2023-29409

CVE-2023-29409 $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on client $ go run...