badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY Inspect exploited vulnerabilities and threat indicators, check their source evidence, and review retained changes. Open the live Observatory · Try the KEV walkthrough · Source coverage · Run it yourself The Observatory brings CISA KEV, ThreatFox, URLhaus, and...

CVE-2026-20079-checker

CVE-2026-20079 Cisco FMC 読み取り専用チェッカー CVE-2026-20079 、Cisco Secure Firewall Management Center FMC の認証バイパス脆弱性に対する、小規模で意図的に機能を限定した検証ユーティリティです。 このリポジトリはチェッカーであり、エクスプロイトではありません。 脆弱性チェーンのうち、セッション昇格、ファイル書き込み、コマンド実行、RCE の部分は含まれていません。 チェック内容 チェッカーは /help/about.cgi に対して 2 つの HTTPS リクエストを送信します: 1...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: A Hands-On Exploit Demonstration in Docker This repository provides a self-contained, interactive Docker environment to safely demonstrate and analyze the "Dirty Pipe" privilege escalation vulnerability. It is designed as an educational tool for security professionals to...

CVE-2025-25163

CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - 認証済み（Subscriber+）任意ファイルダウンロード 説明 WordPress用プラグイン Plugin A/B Image Optimizer は、バージョン3.3までのすべてのバージョンにおいて、ディレクトリトラバーサルに対して脆弱です。これにより、Subscriberレベルのアクセス権限以上の認証済み攻撃者が、機密情報を含む可能性のあるサーバー上の任意のファイルの内容を読み取ることが可能になります。 詳細 タイプ : プラグイン スラッグ : images-optimizer...

cve-2023-42824

cve-2023-42824 cow bypass double-read?...

westone-CVE-2020-17519-scanner

westone-CVE-2020-17519-scanner Apache Flink 1.11.0、1.11.1、1.11.2 Hackers can read/write remote files via REST API Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2020-17519-scanner.git cd westone-CVE-2020-17519-scanner cmd CVE-2020-17519.exe...

CVE-2026-31431-check

CVE-2026-31431 check Read-only checker for the algifaead local-root vuln CVE-2026-31431. Looks at kernel config, module state, AFALG socket reachability, and any mitigations you've put in place, then prints a verdict. It does not run exploit code. Companion to dirty-frag-check CVE-2026-43284 /...

ghostlock-s25fe

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 を Samsung Galaxy S26 シリーズに移植 — Android 16 / GKI 6.12。 単一バイナリ、3つのカーネルライン、実行時の動的パラメータ マッチングにより、理論上はビルドごとのコンパイルなしでS26シリーズ全体をカバーします。 ほとんどのGhostLock移植作業は単一デバイスまたは単一ファームウェアを対象としています。 このリポジトリは、S26ターゲット向けにすべてのメカニズムを書き直した新しい移植であり、...

CVE-2026-55156: Improper Limitation of a Pathname to a Restricted Directory

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, the dashboard HTTP server in token-optimizer-mcp exposes /api/session-summary and /api/session-events with no authentication...

CVE-2026-94283: Out-of-bounds Read

An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94282: Out-of-bounds Read

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-82386: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity...

CVE-2026-84744: Improper Control of Generation of Code

The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing them back into the rendered form, allowing unauthenticated users to execute arbitrary shortcodes registered on the site and read the details of attachments...

CVE-2026-81375: Externally Controlled Reference to a Resource in Another Sphere

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability w...

RHEL 8 : qt5-qtbase (RHSA-2026:72377)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72377 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

Medium: libxml2

Issue Overview: A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX...

Important: amazon-ssm-agent

Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...

Linux Distros Unpatched Vulnerability : CVE-2026-94283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attach...

ROS-20260928-73-0021

The vulnerability in the sound/soc/intel/boards/bytcrrt5640.c kernel of the Linux operating system relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...