CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla-Komponente: Nicht authentifizierter Datei-Upload führt zu RCE Split-Controller-Upload-Bypass → direkter Schreib-Task → /downloads/shell.php → RCE Übersicht CVE-2026-57827 ist eine kritische CVSS 9.8 nicht authentifizierte Schwachstelle für beliebigen Datei-Upload ...

Statement

Dichiarazione Riguardo ai CVE-2021-36593 e CVE-2021-36594, vorrei precisare che avevo solo presentato una richiesta per dividere il CVE-ID. 2 anni fa I CVE-ID saranno pubblicati nei prossimi mesi poiché al momento non è disponibile alcun aggiornamento. Abbiamo rimandato il processo di pubblicazio...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

PichichiH0ll0wer

PichichiH0ll0wer PichichiH0ll0wer About Features Injection methods Installation Usage Credits Über --== Prozess-Hollowing-Loader, geschrieben in Nim, nur für PEs ==-- Ich habe PichichiH0ll0wer gebaut, um zu lernen und beizutragen, klar, aber auch weil ich Shellcodes überall ziemlich leid bin. Das...

MassScanning-CVE-2025-55182

Scanner Continuo per VPS Un setup leggero composto da orchestratore e scanner worker, per eseguire scan di grandi dimensioni o continui su file di input suddivisi. Questo repository contiene script di orchestrazione, un'immagine worker basata su Docker e script di supporto per eseguire scan...

CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection

CVE-2026-9997 – Bypass dello split‑tunneling VPN tramite iniezione di opzioni DHCP Codice del programma server DHCP e client simulati in Python root@kitploit: !/usr/bin/env python3 roguedhcpserver.py - Injects a static route to bypass VPN split tunnel import socket, struct, threading def...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

writeup_split

Zusammenfassung CVE-2024-0684 Eine Schwachstelle im Programm split der GNU coreutils ermöglicht einen Heap-Pufferüberlauf mit benutzerkontrollierten Daten. Eingeführt wurde sie mit 40bf1591bb4362fa91e501bcec7c2029c5f65a43 am 2023-03-04. Ein Fix wurde veröffentlicht mit...

MiniPlasma-Runner

MiniPlasma-Runner Versione modificata di Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adattata per uso C2. Il PoC originale funziona solo da disco. Questa versione viene eseguita interamente in memoria tramite execute-assembly, con un approccio binario suddiviso per evitare il rilevamento...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

nextdns

NextDNS CLI-Client NextDNS CLI ist ein Kommandozeilenwerkzeug, mit dem du den DNS-over-HTTPS-Dienst DoH von NextDNS mit erweiterten Funktionen nutzen kannst. Obwohl die fortschrittlichsten Funktionen nur mit NextDNS funktionieren, kann dieses Programm als Client für jeden DoH-Anbieter oder eine...

Split

Descrizione Divide et Impera è un algoritmo comunemente applicato in programmazione per risolvere un problema complesso dividendolo in molti sottoproblemi più semplici. Possiamo applicare questo approccio alla sicurezza offensiva con un obiettivo diverso: confondere gli EDR in modo che perdano...

CVE-2026-74373

A flaw was found in the Linux kernel's md/raid1 and raid10 components. This flaw involves incorrect accounting of block I/O bio operations for split cloned bios. When a failed bio is split and resubmitted, the system may either double count or miss accounting for these bios. This can lead to...

CVE-2026-52735

Zebra (a Rust-based Zcash node) used a pure-Rust P2SH sigop counter that short-circuited on disabled opcodes like OP_CODESEPARATOR, undercounting sigops compared to zcashd. An attacker without mining power could trigger a chain split by broadcasting P2SH spends with malicious redeem scripts. Fixe...

CVE-2026-74482 mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: unlock immaprwsem before releasing after-split folios foliosplit keeps dereferencing the mapping after the split: shmemunchargemapping-host and remappage while the folios are still frozen/locked, and...

CVE-2026-74373

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix bio accounting for split md cloned bios Use mdclonedbio to control bio accounting instead of relying on r1bioexisted in raid1 or the ioaccounting flag in raid10. The previous logic does not reliably reflect...

CVE-2026-74346

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registration Sashiko pointed out an unrelated bug during a previous patch: https://sashiko.dev//patchset/20260512183852.614045-1-jmoroni%40google.com This change fixes the bug by eliminating...

UBUNTU-CVE-2026-74373

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix bio accounting for split md cloned bios Use mdclonedbio to control bio accounting instead of relying on r1bioexisted in raid1 or the ioaccounting flag in raid10. The previous logic does not reliably reflect...

CVE-2026-72046

In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs a per-buffer-queue-descriptor headerbufaddr at post time and reads the split header back at completion time. Both the post and the read...