CVE-2026-80567

CVE-2026-80567 affects the synaptics-rmi4 input driver in the Linux kernel. The function rmi_f54_buffer_queue() waited for the F54 worker thread to finish but ignored its exit status. When the worker failed (e.g., due to a timeout or register read failure), the queue thread silently returned succ...

CVE-2019-11043

CVE-2019-11043 0th3rs Security Team ====================== PHP संस्करण 7.1.x में 7.1.33 से नीचे, 7.2.x में 7.2.24 से नीचे और 7.3.x में 7.3.11 से नीचे PHP 7.2.20/7.3.10 पर परीक्षित Instructions root@kitploit: 1、较为稳定,只要爆破出query长度和Header头字段长度 2、autosession检测漏洞存在性 3、实现判断目标worker进程数实现健壮性 4、全worker进程污染...

fix_nginx_cve_2026_42945

NGINX CVE-2026-42945 Script di correzione con un clic Rileva automaticamente la distribuzione del sistema, aggiorna NGINX alla versione corretta ≥1.30.1, esegue il backup della configurazione e ripristino automatico. Descrizione della vulnerabilità ID vulnerabilità: CVE-2026-42945 Nome...

open-klara

Open KLara Open KLara ist ein von der Community betriebener Fork von KLara von Kaspersky Lab — ein verteiltes System zum Scannen großer Malware-Sammlungen mit Yara-Regeln. Dieses Projekt wird von der Community betrieben und steht in keiner Verbindung zu Kaspersky Lab. Funktionen Web-Oberfläche —...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC Derivazione e Riflessioni Campo di applicazione: solo per ambienti di test locali, ambienti di riproduzione autorizzati, verifica delle vulnerabilità e analisi delle regole di protezione. Non utilizzare su obiettivi non autorizzati. Le idee PoC in ques...

cpra

CPRA - Sistema di Allertamento e Ripristino a Impulsi Concorrenti Monitora milioni di servizi in contemporanea con riparazione automatica e scalabilità dinamica dei worker. CPRA è un sistema di monitoraggio dell'infrastruttura ad alte prestazioni progettato per team di piattaforma che gestiscono...

CVE-2026-42945

CVE-2026-42945 PoC Go Deutsch | English Ein Erkennungs- und Exploit-Hilfstool für die nginx HTTP/2-Implementierung CVE-2026-42945 , das in autorisierten Umgebungen verwendet wird, um das Vorhandensein der Schwachstelle zu überprüfen, die Wirksamkeit von Patches zu testen und das PoC-Verhalten in...

CVE-2019-11043

CVE-2019-11043 0th3rs Security Team ====================== Nelle versioni PHP 7.1.x inferiori alla 7.1.33, 7.2.x inferiori alla 7.2.24 e 7.3.x inferiori alla 7.3.11 Testato su PHP 7.2.20/7.3.10 Istruzioni root@kitploit: 1、较为稳定,只要爆破出query长度和Header头字段长度 2、autosession检测漏洞存在性 3、实现判断目标worker进程数实现健壮性...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Deserializzazione Insicura RCE Esecuzione Remota di Codice Critica da Worker ➜ Master in Modalità Cluster Wazuh La deserializzazione non sicura nelle comunicazioni cluster di Wazuh consente a un nodo worker compromesso di ottenere RCE come root sul nodo master. 📌 Panorami...

boundary

Boundary Cos'è Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Sito web: https://www.developer.hashicorp.com/boundary/ Forum: HashiCorp Discuss Documentazione: https://developer.hashicorp.com/boundary/docs Tutorial: Piattaforma Learn di HashiCorp Boundary è un proxy...

CVE-2021-23017-POC

CVE-2021-23017-POC È stato identificato un problema di sicurezza nel resolver di nginx che potrebbe consentire a un attaccante in grado di forgiare pacchetti UDP provenienti dal server DNS di causare una sovrascrittura di memoria di 1 byte, con conseguente crash del processo worker o altri...

CVE-2026-77357

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

mhr-cfw

MHR-CFW MITM Domain-Fronted HTTP Relay + Cloudflare Worker Exit English| Persian ---|--- How It Works 1 - GAS + Cloudflare Worker Exit root@kitploit: Client - Local Relay - Google/CDN Front - GAS Google Apps Script Relay - Cloudflare Worker - Exit | +- Shows www.google.com to network DPI filter 2...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-77357

Mesop is a Python-based UI framework for building web applications. Prior to 1.3.3 , applications running in debug mode expose a GET /hot-reload endpoint containing an unbounded loop that depends on a user-supplied counter parameter. An unauthenticated attacker can send a request with a high coun...

CVE-2026-79267

CVE-2026-79267 is a race condition in Workers affecting Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. Chromium rated the severity as Medium . The vulnerability is fixed i...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

CVE-2026-79623 FishCodeTech Muteki Default Local Worker Backend settings.json os command injection

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

EUVD-2026-65491

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

CVE-2026-79623

FishCodeTech Muteki (up to 0.2.5 ) contains an OS command injection vulnerability in the Default Local Worker Backend component, specifically in the file .claude/settings.json. The manipulation can be initiated remotely with low privileges and no user interaction, yielding moderate impact on conf...