CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

CVE-2026-93493 Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

EUVD-2026-82770

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

LiberationPlay-CVE-2025-24132-AirBourne-POC

LiberationPlay! CVE-2025-24132 AirBourne POC CVE-2025-24132 AirBourne 的 POC。目前仅触发溢出并导致崩溃。 为了尝试获得我的汽车车机系统的 root 访问权限，我研究并整理了关于由 Oligo Security 发现的 AirPlay 漏洞 CVE-2025-24132（命名为 Airbourne）的所有信息。 https://www.oligo.security/blog/airborne 这是我第一个逆向工程项目。我是在从未使用过调试器、Linux 和编程经验很少、并且直到项目中途才接触过 MacOS...

AFD

AFD CVE-2022-24494 La vulnerabilidad es una lectura arbitraria de memoria. La causa raíz es la falta de validación en una dirección de memoria suministrada desde el espacio de usuario user-land que se utiliza en una operación memcpy para copiar datos desde esta dirección de memoria a la memoria d...

CVE-2021-21551

CVE-2021-21551 通过启动系统命令来利用CVE-2021-21551进行本地权限提升（LPE）的简单PoC。 https://vulners.com/cve/CVE-2021-21551 在签名的戴尔Windows驱动程序（dbutil23.sys）中发现了一个问题，可能导致整个本地系统被攻陷。该驱动程序的ioctl调度例程缺乏对用户提供的缓冲区的验证。 IOCTL 任何人都可以创建句柄并向这些ioctl代码发出ioctl请求，从而破坏Windows安全模型： 0x9b0c1f40 - 任意物理内存读取 0x9b0c1f44 - 任意物理内存写入 0x9b0c1ec4 -...

CVE-2025-51471-POC

CVE-2025-51471 - Exposición de Token entre Dominios de Ollama - PoC Autor: ajtazer 🔥 Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-51471 , una vulnerabilidad de Exposición de Token de Autenticación entre Dominios que afecta a todas las versiones de Ollama incluyendo l...

CVE-2025-65817

CVE-2025-65817 字段| 值 ---|--- 标题| 漏洞报告：LSC Smart Connect 摄像头 日期| 2024-02-15 描述| 滥用 SD 卡更新钩子，在 LSC Smart Connect 摄像头上生成远程 shell。 标签| iot, vulnerability, cve 固件版本| 1.14.13 LSC Smart Connect 摄像头漏洞报告 发现的漏洞在于利用 startapp.sh 中的更新系统，更具体地说是通过 SD 卡挂载和 update.nor.sh 文件。 配置变量 root@kitploit: routines of sd-car...

CVE-2026-54510

Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrfexemptforapitokens beforerequest hook in src/app.py calls csrf.exemptviewfunc, permanently adding the selected view to Flask-WTF's process-global exemption set. The...

CVE-2024-36837

CVE-2024-36837 / \tCNVD-2024-30128 POC escribe la URL en url.txt y ejecuta CVE-2024-36837.py CVE-2024-36837 En mi primer año de universidad, descubrí que una institución educativa usaba CRMEB Mall como tienda en línea en una acción de protección de Internet. Después de las pruebas, se encontró un...

CVE-2019-12744

CVE-2019-12744 Information Exploit Title: Remote Command Execution through Unvalidated File Upload in SeedDMS versions 5.1.11 CVE: CVE-2019-12744 Vendor Homepage: https://www.seeddms.org/index.php?id=2 Exploit Author: NobodyAtall Tested version: Seeddms 5.1.10, 5.0.11 Tested OS: Windows 7 x64...

CVE-2022-36231

CVE-2022-36231 La gema de ruby pdfinfo = 0.5.3 es vulnerable a la Inyección de Comandos del Sistema Operativo al ejecutar un método en un objeto PDF::Info. Un atacante que utilice un payload especialmente diseñado puede ejecutar comandos del sistema operativo mediante el encadenamiento de comando...

CVE-2026-90350

CVE-2026-90350 affects the mt76 WiFi driver in the Linux kernel (mt7996 variant). The function mt76_vif_link() indexes the mvif->link[] array without validating link_id. Callers pass deflink_id, which holds IEEE80211_LINK_UNSPECIFIED (0xf) until the first link is added. Since IEEE80211_MLD_MAX...

CVE-2026-90251

CVE-2026-90251 affects the Linux kernel's Bluetooth MSFT driver . In read_supported_features(), the evt_prefix_len field (an unvalidated u8) is used to call kmemdup without checking it against the actual response length. A malicious or buggy Bluetooth controller can declare evt_prefix_len = 255 i...

EUVD-2026-81784

In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls how many bytes are copied from shared memory into the RPMI notification buffer. It is not validated against the negotiated shared-memory si...

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE en HFS 2.3 - CVE-2014-62 🔖 Título del Proyecto root@kitploit: Ejecución Remota de Código a través de HTTP File Server HFS 2.3 ⚙ Herramientas Utilizadas • Kali Linux • Nmap • Metasploit • Objetivo: HFS 2.3 en Windows 7 🔐 Detalles de la Vulnerabilidad • Nombre:...

Metabase_CVE-2021-41277

MetabaseCVE-2021-41277 描述 Metabase 是一个开源的数据分析平台。在受影响的版本中，自定义 GeoJSON 地图（admin-settings-maps-custom maps-add a map）支持功能中发现了一个安全问题，可能导致本地文件包含（包括环境变量）。URL 在加载前未经过验证。此问题已在新的维护版本（0.40.5 和 1.40.5）以及后续版本中修复。如果您无法立即升级，可以通过在反向代理、负载均衡器或 WAF 中配置规则，在应用程序之前提供验证过滤器来缓解此问题。 关注我们 Vulnmachines YouTube Twitter...

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2025-53652: Jenkins Git参数插件未验证输入漏洞。 摘要 此漏洞的产生是因为用户控制的输入被不安全地注入到Git检出命令中。 用户输入作为构建参数提供（例如gitParameters），其中可能包含恶意shell命令。 该参数被包装到GitParameterValue（继承StringParameterValue）中，其buildEnvironment方法在不进行清理的情况下将其暴露为构建上下文中的环境变量。 在SCM检出过程中，Jenkins通过build.getEnvironment加载构建环境变量。...

CVE-2026-91010 Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletion

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...