270494 matches found
GHSA-8H5Q-977G-XQF2 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F4FR-6HPC-V792 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P67G-9RGF-JJH6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-5724-75RM-8CXV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M4C2-Q6HR-P6W3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XM9J-86VV-2J8R vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XRMP-96P2-C668 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9QGH-MJ3F-5GW3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G897-47PP-HQ75 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-FV55-2P8J-MHM4 vulnerabilities
Vulnerabilities for packages: chromium...
OpenWire-CVE-2023-46604-Investigation
Investigación de OpenWire-CVE-2023-46604 Laboratorio OpenWire Durante mi turno como Analista de Centro de Operaciones de Seguridad SOC de Nivel 2, recibí una escalación de un analista de Nivel 1 sobre un servidor de acceso público que había sido observado comunicándose con múltiples direcciones I...
thm-ice-icecast-rce-privesc
TryHackMe — Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...
cve-2023-51385
Verify CVE-2023-51385 First, add the following content to /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p There is a command injection in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar...
Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report
Ciego-SSRF-a-Ejecución-Remota-de-Código-Shellshock-Informe-Profesional-de-Bug-Bounty Este repositorio contiene un informe profesional de bug bounty que demuestra la explotación exitosa de una vulnerabilidad de SSRF Ciego que alcanzó un endpoint CGI interno vulnerable a Shellshock CVE-2014-6271. S...
session_reaper_lab
CVE-2025-54236 - SessionReaper Lab Docker environment for practical demonstration of CVE-2025-54236 SessionReaper: PHP Object Deserialization leading to RCE in Magento Open Source 2.4.7. Exclusive use in controlled environment. Do not run against systems without explicit authorization. About the...
CVE-2019-11043-Vulnerability
Collaberators: Olaf Madejski, Andrew Masone, Nate Desany PHP-FPM Reverse Tunnel Exploitation & Persistence Demonstration CVE-2019-11043 — Debian PHP-FPM Path Handling Vulnerability Project Overview In October 2019, Debian Security Advisory researchers Emil Lerner and Andrew Danau published a noti...
mariadb-13-rce-lab
MariaDB 13.0.1-rc RCE 实验室 在未经修改的原版 MariaDB 13.0.1-rc Docker 镜像 上以 uid 999（mysql）身份执行远程代码。 两种漏洞利用变体： 变体| 文件| 要求| 备注 ---|---|---|--- 纯 SQL （推荐）| exploitpuresql.py| 低权限 MariaDB 账户 + TCP| 无需宿主机访问、无需 docker、无需 /proc/mem、无需 root 密码 宿主机辅助 PoC| exploit.py| Docker 宿主机上的 root| 通过 /proc//mem 写入 JOP 链...
CVE-2026-0073
0-Click RCE en Android Vulnerabilidad crítica CVE‑2026‑0073 en el ADB de Android, un fallo de bypass de autenticación en la verificación del certificado TLS del daemon adbd, específicamente en la función adbdtlsverifycert la verificación del certificado TLS hace que la depuración inalámbrica...
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 CVSS score: 8.8, has been described as a type confusion bug in V8, Chrome's JavaScript and...