CVE-2021-21985_PoC

CVE-2021-21985 الكود المعرض للثغرة الفئات/الطرق المتاحة، عينة صغيرة لأغراض إثبات المفهوم: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

CVE-2024-25291

DeskFiler RCE إثبات مفهوم لثغرة CVE-2024-25291. deskfiler - 1.2.3 يسمح بـ Electron Webview في التطبيق، مع ما ينتج عنه من تنفيذ تعليمات برمجية عن بُعد. في هذا المستودع يوجد تطبيق مثال قابل للاستغلال وإثبات مفهوم POC لاستغلاله. كإثبات مفهوم، يوجد ملف Python يقوم بأتمتة العملية. 1. نظرة عامة على...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Outil d'Exploitation Java GUI Version Java GUI de l'outil d'exploitation de la vulnérabilité RCE Exécution de Code à Distance du Proxy Plug-In Oracle WebLogic Server. Structure du projet root@kitploit: java-version/ ├── pom.xml Fichier de configuration du projet Maven ├── README.md...

CVE-2026-21962

🔥 CVE-2026-21962 — Boîte à outils de détection Oracle HTTP Server Outils de détection sûrs et non exploitants pour identifier les instances Oracle HTTP Server et WebLogic Proxy Plug-in affectées par CVE-2026-21962. 🧠 Présentation de la vulnérabilité CVE : CVE-2026-21962 Gravité : Critique Vecteur...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- يحتوي Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in على ثغرة قابلة للاستغلال بسهولة، دون مصادقة، وقابلة للوصول عبر الشبكة، مما يسمح بالاختراق عبر HTTP. تشمل الإصدارات المدعومة المتأثرة 12.2.1.4.0،...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — Vulnérabilité de sécurité critique 😈 🚨 Gravité Score CVSS : 10,0 / 10 Critique Publiée : 20 janvier 2026 Niveau de risque : 🔥 Maximum — action immédiate recommandée 🧠 De quoi s'agit-il ? Une vulnérabilité critique affectant : Oracle HTTP Server Plug-in proxy Oracle WebLogic...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093315 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.25 and prior and 8.0.15...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093283 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

UBUNTU-CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169 Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

CVE-2026-42169 affects GIMP and its DDS plug-in. The APNG loader has a heap-buffer-overflow when fcTL width exceeds IHDR width, causing writes past heap bounds. A second heap-based overflow in the DDS plug-in arises from a BPP mismatch in load_layer(). Both issues are triggered by opening a speci...

EUVD-2026-52573

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

Linux Distros Unpatched Vulnerability : CVE-2026-42169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading t...