CVE-2026-90315

A flaw was found in the Linux kernel's PCI/sysfs legacy I/O and memory handlers. These handlers failed to enforce kernel lockdown, a security mechanism designed to prevent privileged users from performing certain low-level operations. A local root user could exploit this by writing to arbitrary I...

LovelySn0w

LovelySn0w. 一个 iOS CVE-2018-4150 应用程序示例。如果它在 XCode 中无法编译，请在 Twitter 上私信我。那可能是我的问题！目前尚未完成。如果你找到 //ACPV ›Some version ... 你是从 PS4 场景过来的，等着我完成 PS4 漏洞的研究工作，请阅读“致 PS4 场景”部分。 在 exploit.m 文件中，该应用将准备进行严肃测试。这意味着它会对文件系统执行某些操作，例如将 .tar 文件解压到特定文件夹。对于那些不明白我意思的人： 不，这不是一个 zip-app-free 的东西，它不会为你解压...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 远程代码执行漏洞（CVE-2016-5734） 搭建 git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 利用 python3 cve-2016-5734.py -u root --pwd="root" http://localhost:8083 -c "system'ls -lua'" 参考...

Enumprotections_BOF

Enumprotections BOF 此 BOF 可用于枚举系统进程并识别每个进程的保护级别。还会返回其他信息，例如服务关联、用户、会话和路径。结合这些信息，可以识别出适合探索 SYSTEM 级 DLL 劫持的良好候选进程。理想进程应具备以下条件： 1. 未受保护 2. 与服务关联，因此可启动/停止 3. 第三方软件。微软非常擅长识别对 Microsoft 组件的劫持。 Usage Compilation 该工具在编写时未使用通常的 BOF API 声明（例如 bofdefs.h 文件）。正如 Matt Ehrnschwender 的这篇 博客文章 所述，可以使用 objcopy 将格...

CVE-2025-47176

CVE-2025-47176 PoC 浏览器桥 描述 此概念验证（PoC）演示了 CVE-2025-47176 漏洞模拟。它向 Outlook 注入一个包含恶意同步路径的构造邮件项，该路径会在扫描时触发一个操作。 重要提示： 此 PoC 模拟了有漏洞的 Outlook 路径解析，并在检测到恶意路径时触发系统重启 。 使用 malicious.prf 进行额外测试 你也可以通过导入构造的 Outlook 配置文件（malicious.prf）来测试此 PoC： 1. 将 malicious.prf 放置在与 PoC.py 相同的文件夹中。 2. 使用导入命令运行 Outlook： &...

CVE-2026-105862

The Payload headless content management system is vulnerable in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . A collection allowing downloadable SVG uploads can store a malicious file that bypasses sanitization. When a user downloads and opens the SVG, it executes attacker-c...

EUVD-2026-93495

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information about related documents protected by access.read where...

CVE-2026-105851 Payload: Field access control bypass on auth collections

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation copies values from a source document even when a field is hidden or its access.read or access.create rule rejects that val...

CVE-2026-105957

A SQL injection vulnerability exists in the SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/admin/view_product.php file. By manipulating the Category argument, an attacker can perform a remote SQL injection. The exploit for this vulne...

CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

EUVD-2026-93487

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

Baron-Samedit

Baron-Samedit CVE-2021-3156 のエクスプロイトとデモシステム...

Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Multiple vulnerabilities were found in IBM Db2 LUW that affect Platform System Manager PSM and Db2 pattern Type pType shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System CPS 2.3.6.2. Vulnerability Details CVEID:CVE-2026-16480 DESCRIPTION: IBM Db...

USN-8889-1: Linux kernel (OEM) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8887-1 linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8886-1: Linux kernel (NVIDIA Tegra) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVDIMM Non-Volatile Memory Device drivers; - Handshake API; - ARM32 architecture; - ARM64 architecture; - MIPS...

CVE-2026-105921

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2019-9193

EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in certain versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server vulnerable to CVE-2019-9193. Features...

CVE-2026-105920

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...