CLSA-2026-1790864778 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.14-tuxcare.1...

CVE-2024-4701-POC

CVE-2024-4701-POC POC for CVE-2024-4701 Download the genie docker file from https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml or this repo run docker-compose up Download the attached http payload loadlib Run the following command nc -w 5 localhost 8080 loadlib You may need to...

GHSA-4cx5-89vm-833x-POC

GHSA-4cx5-89vm-833x-POC GHSA-4cx5-89vm-833x/CVE-2024-52800 For POC details, plz check https://github.com/veraPDF/veraPDF-library/issues/1488...

CVE-2024-25466

CVE-2024-25466 Description for CVE-2024-25466 Suggested description Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component. Vulnerability Type...

CVE-2021-3156

CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 vulnerability in sudo dubbed Baron Samedit by Qualys. Usage build: $ make target list: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich manual mode: $ ./sudo-hax-me-a-sandwich Brute force target detection experiment...

CLSA-2026-1790863423 TuxCare security update for undici (2 CVEs)

TuxCare rebuilt undici to address 2 CVEs. Fixed in 6.19.7-tuxcare.2...

CLSA-2026-1790863104 TuxCare security update for fast-uri (2 CVEs)

TuxCare rebuilt fast-uri to address 2 CVEs. Fixed in 3.1.3-tuxcare.2...

CLSA-2026-1790863084 TuxCare security update for fastify (1 CVE)

TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.11.3-tuxcare.4...

CLSA-2026-1790863075 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 2.4.2-tuxcare.4...

CLSA-2026-1790863073 TuxCare security update for nodemailer (2 CVEs)

TuxCare rebuilt nodemailer to address 2 CVEs. Fixed in 9.1.0-tuxcare.5...

CLSA-2026-1790863041 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.15-tuxcare.1...

CLSA-2026-1790862953 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 10.7.0-tuxcare.2...

CLSA-2026-1790862941 TuxCare security update for fast-uri (3 CVEs)

TuxCare rebuilt fast-uri to address 3 CVEs. Fixed in 3.1.5-tuxcare.2...

CLSA-2026-1790862940 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 2.0.2-tuxcare.2...

CLSA-2026-1790862926 TuxCare security update for brace-expansion (2 CVEs)

TuxCare rebuilt brace-expansion to address 2 CVEs. Fixed in 4.0.1-tuxcare.2...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp This program is an exploit for cve-2018-8453. Development/Test platform: x86: Windows 10 RS2 15063 x64: Windows 10 RS2 16299 Note: Uses Palette to read and write kernel memory. Serious Disclaimer: This tool is only for technical research and learning. Any...

CLSA-2026-1790861577 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 77 org.springframework.boot packages to address 1 CVE. Fixed in 2.4.5-tuxcare.5...

Blackash-CVE-2025-24071

Blackash-CVE-2025-24071 CVE-2025-24071: NTLM Hash Leak via .library-ms File, Metasploit Module 🚨 Description Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. Metrics CNA: Microsoft Corporation...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the path traversal vulnerability in the python AioHTTP library = sudo apt install python3-venv Lab setup git clone https://github.com/z3rObyte/CVE-2024-23334-PoC cd CVE-2024-23334-PoC python3 -m venv .env chmod +x ./.env/bin/activate source...

CVE-2024-23897

Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces an @ character...