ezwinrar

ezwinrar Strumento Python che sfrutta la CVE-2018-20250 trovata dal team di CheckPoint : https://research.checkpoint.com/extracting-code-execution-from-winrar/ Modificando il campo filename del formato ACE, la cartella di destinazione cartella di estrazione viene ignorata e il percorso relativo n...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Script Shell per mitigare CVE-2021-41773, una vulnerabilità di Path Traversal e File Disclosure in Apache Installazione root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Utilizzo Fix completo e modalità consigliata per mitigare la...

CVE-2026-42048

CVE-2026-42048 CVE-2026-42048 Langflow Path Traversal / Eliminazione Arbitraria di Directory PoC https://github.com/user-attachments/assets/6e5481ff-e953-47a5-8870-70b30c6550de Descrizione CVE-2026-42048 : Vulnerabilità di Eliminazione Arbitraria di Directory in Langflow descrizione: Una...

CVE-2024-25293

PoC di esecuzione locale di codice MJML Una Proof-of-Concept per la vulnerabilità CVE-2024-25293. È stato scoperto che mjml-app v3.0.4 e 3.1.0-beta presentano una vulnerabilità di remote code execution RCE. In questo repository è presente un esempio di applicazione vulnerabile e un exploit...

vaultize_CVE-2024-36079

Informazioni sulla vulnerabilità La soluzione on-premise Vaultize DRM v.21.07.27 è vulnerabile al caricamento di file arbitrari. I file i cui nomi contengono parte del percorso assoluto del file system possono essere caricati a causa della mancanza di filtraggio dei nomi dei file. Quando si tenta...

CVE-2026-49049

Indagine sulla vulnerabilità CVE-2026-49049: Scrittura arbitraria di file non autenticata in JoomShaper Helix3 Joomla Il repository contiene materiali, analisi tecnica e Proof of Concept PoC per la vulnerabilità critica CVE-2026-49049 , individuata nel framework di template obsoleto Helix3 di...

CVE-2026-80700

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...

CVE-2026-80690

CVE-2026-80690 affects the Linux kernel UFS (Universal Flash Storage) SCSI driver. The root cause is that the hba->rpmbs list is not initialized in ufshcd_alloc_host(), leading to a NULL pointer dereference in the device teardown path when ufs_rpmb_probe() fails. The fix is a list initializati...

CVE-2026-80687

CVE-2026-80687 is a deadlock vulnerability in the Linux kernel 's iommufd/viommu subsystem. The function iommufd_vdevice_alloc_ioctl() acquires idev->igroup->lock, then validates the driver's vdevice_size against the core structure size. On failure, a WARN_ON_ONCE guard jumps to out_put_ide...

CVE-2026-80687

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

EUVD-2026-67563

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

CVE-2026-80667

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller that queued the work and waited on mpesww-comp would block indefinitely...

EUVD-2026-67533

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed. Add NULL checks to...

CVE-2026-80657

CVE-2026-80657 affects the Linux kernel driver accel/amdxdna . The root cause is a NULL pointer dereference : the management mailbox channel cleanup helpers xdna_mailbox_free_channel() and xdna_mailbox_stop_channel() can be invoked from error-handling paths after the management channel (mgmt_chan...

CVE-2026-80650

CVE-2026-80650 affects the Linux kernel 's media: atomisp: gc2235 camera sensor driver. The root cause is incorrect error-path handling in gc2235_probe(): if media_entity_pads_init() fails, the probe routine calls gc2235_remove() which frees the device structure, but execution then falls through ...

EUVD-2026-67526

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

EUVD-2026-67496

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c "PCI/MSI: Unmap MSI-X region on error" added an iounmapdev-msixbase on the error path of...

CVE-2026-80613

CVE-2026-80613 affects the veth driver in the Linux kernel. During XDP enablement , if xdp_rxq_info_reg() or xdp_rxq_info_reg_mem_model() fails, the rollback loop decrements the loop index before the first iteration (for (i--; i >= start; i--)), erroneously skipping the netif_napi_del() call f...

CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

F5-BIG-IP

CVE-2020-5902 — F5 BIG-IP TMUI RCE Proof-of-Concept-Exploit für die kritische Path-Traversal-/Remote-Codeausführungs-Schwachstelle in F5 BIG-IPs Traffic Management User Interface TMUI. ⚠️ Nur für autorisierte Penetrationstests und Sicherheitsforschung. Der unbefugte Einsatz gegen Systeme, die eine...