231 matches found
CVE-2025-4275
๐ CVE-2025-4275: Hydroph0bia SecureFlash ่จผๆๆธใทใฃใใฆใคใณใฐ ใใฎใชใใธใใชใซใฏใInsyde H2O ใใผในใฎ UEFI ไบๆใใกใผใ ใฆใงใขใซๅฝฑ้ฟใไธใใ Secure Boot ใใคใใน่ๅผฑๆง CVE-2025-4275 ใซ้ข้ฃใใ็ ็ฉถ่ณๆใๅซใพใใฆใใพใใๆฌ่ๅผฑๆงใฎๆ่ก็ๅๆใๅ้กใซ้ขไธใใใใคใใชใใชใใณใซ็ ็ฉถ่ ใๅฎ็ฐๅขใใใณๆ่ฒ็ฎ็ใฎไธกๆนใฎๆ่ใงใใฎ่ๅผฑๆงใใใๆทฑใ็่งฃใใ็ ็ฉถใใๅฎ้จใใใใใฎใใญใฅใกใณใใจใใผใซใ้็ดใใฆใใพใใ ๐ ็ฎๆฌก ๅ็บ่ฆใจๅ ฌๅผๅ่ๆ็ฎ ่ๅผฑๆงใฎๆฆ่ฆ๏ผๅๆใๆช็จใPoC๏ผ ๐ Insyde H2O ใซใใใ...
CVE-2018-8897
CVE-2018-8897 Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. KVA Shadowing should be disabled and the relevant security update should be uninstalled. This may not work with certain hypervisors like VMWare, which discard the...
socgholish_finder
SocGholish Finder WebใตใคใใในใญใฃใณใใฆSocGholishใคใณใธใงใฏใทใงใณใๆคๅบใใใทใณใใซใชในใฏใชใใใงใใใคใณใธใงใฏใทใงใณใ่ฆใคใใฃใๅ ดๅใฏๆคๅบใใฆ่กจ็คบใใใทใฃใใผใคใณใฐURLใใกใคใณใฎ้ฃ่ชญๅใ่งฃ้คใใฆ่กจ็คบใใพใใ root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help show this help message and exit -url URL URL to check -...
CVE-2026-80921
CVE-2026-80921 affects the Linux kernel in the KVM s390 vsie (Virtual SIE) subsystem. When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), bits 64โ255 retain stale values from the vsie page, potentially allowing a nested guest to access a device no longer available . The CVSS 3.1...
CVE-2026-80921 KVM: s390: vsie: zero stale crypto bits
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...
wheelaudit
wheelaudit Python Wheel ใใกใคใซใปใญใฅใชใใฃในใญใฃใ โ ใคใณในใใผใซๅใซ .whl ใใกใคใซใฎใปใญใฅใชใใฃๅ้กใในใญใฃใณใใพใใ Python ใฎ wheel ๅฆ็ใซใใใๆ่ฟใฎ CVE ใซๅๆฉใฅใใใใฆใใพใ: CVE-2026-24049 : wheel ๅฑ้ๆใฎใในใใฉใใผใตใซใซใใใใทในใใ ใใกใคใซใฎๆจฉ้ๆไฝใๅฏ่ฝ CVE-2026-1703 : pip ใ wheel ใขใผใซใคใใใคใณในใใผใซใใ้ใฎใในใใฉใใผใตใซ Google GHSA-w97x-xxj5-gpjx : Python wheel ใซใใใ Zip ใใผใตใผใฎๅทฎๅ่ๅผฑๆง...
Linux Distros Unpatched Vulnerability : CVE-2026-80921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in t...
CVE-2025-4275 โ Updated!
๐ CVE-2025-4275: Hydroph0bia SecureFlash Certificate Shadowing This repository contains research material related to CVE-2025-4275, a Secure Boot bypass vulnerability affecting UEFI-compatible firmware based on Insyde H2O. It centralizes technical analysis of the vulnerability, the binaries...
CVE-2026-79745
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checking. The mutating POST/PUT /api/prompts and...
CVE-2026-79745 MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering of Globally-Served Templates/Resources)
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checking. The mutating POST/PUT /api/prompts and...
CVE-2026-82862
Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution...
CVE-2026-82862
Hulumi versions prior to v1.3.2 are affected by a helper script shadowing vulnerability in which the threat-model helper script is resolved from an unsafe root . An attacker can place a malicious file in the workspace directory, causing it to be loaded in place of the intended helper script, resu...
CVE-2026-82862 Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files
Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution...
EUVD-2026-68450
Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution...
CVE-2026-82862 Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files
Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution...
CVE-2026-75757 AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...
CVE-2026-75757 AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...
EEF-CVE-2026-75757 AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain
Summary Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...
CVE-2026-75757
ash_admin (ash-project) is vulnerable to session/actor shadowing via a flawed client-side cookie reader. The JavaScript reads state cookies (e.g., actor_authorizing, actor_domain) using an unanchored regex (new RegExp(name + "=([^;]+)")) against document.cookie, so any cookie whose name merely en...