CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 Для веб-приложений, использующих DEDECMS 5.71SP1 и более ранние версии, происходят URL-редиректы, поскольку ошибка логики исходного кода CMS не проверяет входящий GET-запрос Для веб-приложений на dedecms 5.71SP1 и ниже происходит URL-редирект, так как из-за ошибк...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Руководство и теоретический код для CVE-2023-35674 Поскольку Android выходит за пределы моих навыков, пожалуйста, используйте это как общий обзор с моей точки зрения о том, как я бы эксплуатировал эту CVE. Фрагменты кода — всего лишь скелеты,...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

poc-CVE-2026-0073

CVE-2026-0073 PoC Обход аутентификации TLS в беспроводном ADB Этот каталог содержит proof of concept на Python для CVE-2026-0073. Скрипт создан с использованием методов генерации кода на основе ИИ. Краткое описание CVE-2026-0073 — логическая ошибка в проверке сертификатов демона ADB...

CVE-2026-35570

Выход из песочницы: как я нашёл критический обход path traversal в openclaude CVE-2026-35570 | CVSS 8.4 High | openclaude v0.1.7 Не каждая уязвимость требует сложной цепочки эксплойтов. Иногда одного неудачно расположенного оператора return достаточно, чтобы пробить дыру прямо в вашей модели...

cve-2026-0013-exploit

This repository does not have a README...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Уязвимость DoS на подавление RADIUS в Cisco ISE 🌐 ⚠️ Обзор 🚨 Высокий уровень опасности — отказ в обслуживании DoS в Cisco Identity Services Engine ISE! 💥 Неаутентифицированный удаленный злоумышленник может вызвать сбой устройства с помощью специально сформированных RADIUS-пакетов...

CLEANSTART-2026-WY70417 logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem

Security vulnerability affects the util-linux package. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...

NPM: ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

NPM: ip-address: isInSubnet and isHostInSubnet compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range vulnerability discovered by ? in WordPress Npm ip-address versions = 10.7.0...

SUSE CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

CVE-2025-26465

CVE-2025-26465 Клиент OpenSSH содержит логическую ошибку в версиях с 6.8p1 по 9.9p1 включительно, что делает его уязвимым к активной MitM-атаке, если включена опция VerifyHostKeyDNS, позволяя злоумышленнику выдавать себя за легитимный сервер при попытке клиента подключиться к нему. Как работает...

CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

DEBIAN-CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

CVE-2026-101913

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/64 instead of the complete fe80::/10 IPv6 link-local range. An attacker-controlled address elsewhere in fe80::/10 can...

CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

CVE-2026-101912 ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

GO-2026-6488 OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user in github.com/openfga/openfga

OpenFGA: ListUsers returns a deliberately-excluded user when a but not exclusion under a type-bound wildcard is intersected and with another relation that also grants that user in github.com/openfga/openfga...

CVE-2026-90176

A flaw was found in ksmbd, a server message block SMB protocol implementation within the Linux kernel. A logic error in the checklockrange function, which is responsible for enforcing file locks, causes it to bypass mandatory byte-range lock checks for single-byte operations. This allows an...

CVE-2026-100598 OpenClaw before 2026.7.1 Approval Binding Logic Error

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

CVE-2026-100598 OpenClaw before 2026.7.1 Approval Binding Logic Error

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...