weightBufs

WeightBufs: WeightBufs est un exploit de lecture/écriture du noyau pour tous les appareils Apple avec prise en charge du Neural Engine. Bugs et exploit par @simo36, vous pouvez consulter mes slides de présentation au POC pour plus de détails sur les vulnérabilités et les techniques d'exploitation...

IntelTXE-PoC

Avertissement Toutes les informations sont fournies à des fins éducatives uniquement. Suivez ces instructions à vos propres risques. Ni les auteurs ni leur employeur ne sauraient être tenus responsables de tout dommage ou perte directe ou indirecte résultant de l'action ou de l'inaction d'une...

s3sec

s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC Un script bash pour exploiter facilement la vulnérabilité de lecture arbitraire de fichiers d'ImageMagick CVE-2022-44268 Version d'ImageMagick concernée root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — Laboratoire de traversée de chemin NLTK Un petit laboratoire Docker reproductible qui compare le comportement de traversée de chemin encodé en pourcentage dans NLTK 3.9.4 avec le comportement corrigé dans NLTK 3.10.0. La version vulnérable valide le nom de la ressource avant le...

Updated mingw-expat & expat packages fix security vulnerabilities

Expat Denial of Service via storeAtts Quadratic Complexity. CVE-2026-66046 Expat Out-of-Bounds Read via dtdCopy. CVE-2026-76641 In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding...

CVE-2026-86137

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp...

EUVD-2026-71830

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp...

CVE-2026-86137

libxml2 before 2.15.4 contains an out-of-bounds read in the xmlFAParsePosCharGroup function, specifically within the NXT macro of the xmlregexp module. This flaw can lead to a limited availability impact (potential crash), though the overall severity is rated LOW (CVSS 3.1 base score 2.9) due to ...

CVE-2026-86137

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp...

PoC-CVE-2025-12097

CVE-2025-12097 الوصف يحتوي تعديل NI لخادم Appweb على ثغرة اجتياز دليل تسمح للمهاجم بقراءة ملفات عشوائية على الخادم. مسار URI /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini سيتم تحويله إلى: root@kitploit: pathInfo cchar "/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/windows/win.ini” 0x000000010076f80...

CVE-2025-14847

CVE-2025-14847 الوصف CVE-2025–14847، المعروف أيضًا باسم MongoBleed، هو ثغرة أمنية تسمح للمهاجمين بقراءة بيانات غير مصرح بها من مساحة ذاكرة الكومة heap للخادم الذي يعمل عليه قاعدة بيانات MongoDB، دون مصادقة. كيفية إعادة الإنتاج root@kitploit: podman-compose vuln-machine/ up -d كيفية الاستغلال...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-10slack15.0.txz: Rebuilt. This update fixes bugs and security issues: xmlregexp: Prevent out-of-bounds read in NX...

CVE-2022-46364

CVE-2022-46364 — Apache CXF MTOM/XOP SSRF قراءة ملف إثبات المفهوم لاستغلال CVE-2022-46364 — ثغرة تزوير الطلب من جانب الخادم SSRF في Apache CXF في معالجة طلبات MTOM/XOP. ملخص الثغرة CVE-2022-46364 تؤثر على Apache CXF قبل الإصدارين 3.4.10 و 3.5.5. عندما يتم تمكين MTOM آلية تحسين نقل الرسائل على خدم...

CVE-2022-46364-poc

CVE-2022-46364 — ثغرة SSRF / LFI في Apache CXF عبر XOP:Include المؤلف: 0xmid00 نوع الثغرة: SSRF / قراءة ملفات محلية عبر XOP:Include في طلبات MTOM المتأثر: Apache CXF 3.5.5 و 3.4.10 ما هي الثغرة؟ يقوم Apache CXF بمعالجة رسائل MTOM آلية تحسين نقل الرسائل التي تحتوي على عناصر XOP:Include. من المفترض...

Gradio - Absolute Path Traversal

Gradio 6.7 on Windows with Python 3.13+ contains an absolute path traversal caused by incorrect path validation in path joining logic, letting unauthenticated attackers read arbitrary files from the server. id: CVE-2026-28414 info: name: Gradio - Absolute Path Traversal author: 0xAkoko severity:...

Oracle Linux 8 : ELSA-2026-63163-0: / container-tools:ol8 (ELSA-2026-631630)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-631630 advisory. - rebuild with updated Go to fix CVE-2026-42499 - rebuild with updated Go to fix CVE-2026-42499 - rebuild with Go 1.25.11 to fix CVE-2026-33818,...

PT-2026-86298

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp...

Linux Distros Unpatched Vulnerability : CVE-2026-85522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file...

CVE-2026-52763

YesWiki , a PHP-based wiki system, is affected by a stored SQL injection in the recentchanges action (actions/recentchanges.php). The period argument supplied via the action syntax ({{recentchanges period="..."}}) bypasses a whitelist that only validates the $_GET form, flowing unvalidated into P...