CVE-2024-8465-PoC

CVE-2024-8465 – SQL Injection Proof of Concept Team Information Team Name: The Misfits Team Members: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Overview This repository contains a vulnerable web application created as a Proof of Concept PoC to demonstrate an SQL...

EUVD-2026-89666

The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'displayoptions' Setting in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-103049

A flaw was found in the MediaWiki Cargo extension. This vulnerability allows a remote attacker to conduct a reflected Cross-Site Scripting XSS attack due to improper input sanitization of table headers on the Special:CargoQuery page. By enticing a user to follow a specially crafted link, an...

SUSE CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

CVE-2026-103049 XSS in Cargo's Special:CargoQuery page due to unsanitized table headers

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: before 1.46.1...

CVE-2026-103049 XSS in Cargo's Special:CargoQuery page due to unsanitized table headers

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: before 1.46.1...

CVE-2026-103049

The MediaWiki Cargo extension (versions before 1.46.1 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the improper sanitization of table headers on the Special:CargoQuery page. A remote attacker can exploit this by enticing a user to click a specially crafted lin...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

EUVD-2026-89189

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102723

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102723

A NULL Pointer Dereference vulnerability exists in the software (related to Eclipse ThreadX/netxduo based on provided references) caused by MSRP Attribute Table Exhaustion . The vulnerability results in a high availability impact according to the CVSS 4.0 metric. No specific affected versions, ro...

CVE-2026-102723

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

iovy_root_research

Inspired by dosomder/iovyroot https://github.com/dosomder/iovyroot A root tool based on the CVE-2015-1805 vulnerability It supports 32 and 64bit, get sys call table address via swi. ref to Getting syscalltable on Android...

Byepervisor

Byepervisor Summary PS5 hypervisor exploit for = 2.xx firmware. Two vulnerabilities and exploit chains are contained in the repo, they are independent of each other and either can be used. One exploit is provided mainly just for preservation /oldjumptableexploit, only the primary exploit chain...

CVE-2026-97395

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

CVE-2026-97598

A flaw was found in the Linux kernel's IPv4 routing subsystem. This vulnerability allows a local user with network configuration privileges to cause a Denial of Service DoS. When automatic routing table identifier allocation is requested, the kernel searches through table identifiers without an...

Insertion of Sensitive Information into Log File

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the execute method in azureblobtoteradata.py and s3toteradata.py, when no...

KVM-Januscape

KVM-XJ ホットパッチ dumptool.py はオフセットを自動検索するためのものです。使い方はコードを見てください。 脆弱性概要 CVE-2026-53359（Januscape）は、Linux カーネル KVM シャドウ MMU における Use-After-Free（UAF）脆弱性です。 潜伏期間：16 年（2010年8月～2026年7月） 影響範囲：ネステッド仮想化を有効にしたすべての Intel/AMD x86 システム 危険度：高、VM 内の root ユーザーがホストに脱出し、ホストの root 権限を取得可能...

CVE-2026-97395: Undefined Security Weakness

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

SUSE CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make -...