69428 matches found
cve-2026-20896-gitea-poc
CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized red team / pentest operations only. This repository contains a minimal checker for CVE-2026-20896, an authentication bypass in official Gitea Docker images up to and including 1.26.2 when reverse-proxy authentication is enabled. What...
crypto-scanner
Scan your codebase for quantum-vulnerable cryptography before it's too late. Quick Start • Why Quantum-Ready? • Usage • Risk Levels • CI/CD • About Overview Crypto Scanner is a CLI tool that scans your codebase for cryptographic algorithms and generates quantum-vulnerability risk assessments. It...
CVE-2026-61511
VBulletin RCE POC Telegram : @esp256 Support : massive/single scan Fofa Dork root@kitploit: body="Powered by vBulletin" body="vbulletin/core/cpstyles" body="Powered by vBulletin" && body="6.2" body="Powered by vBulletin" && body="6.1" body="Powered by vBulletin" && body="6."...
CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser
9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...
CVE-2024-25153
CVE-2024-25153 This is a proof of concept for CVE-2024-25153, a Remote Code Execution vulnerability in Fortra FileCatalyst Workflow 5.x, before 5.1.6 Build 114. Full technical details can be found at https://labs.nettitude.com/blog/cve-2024-25153-remote-code-execution-in-fortra-filecatalyst Usage...
CVE-2026-85751
Mailu is a mail server distributed as a set of Docker images. In deployments where PROXY_AUTH_WHITELIST was configured but REAL_IP_HEADER was unset (Mailu 2.0 through 2024.06.54; helm-charts prior to 2.7.3), nginx trusted a client-controlled X-Forwarded-By header for proxy authentication. The pro...
CVE-2026-85751 Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust
Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXYAUTHWHITELIST configured but REALIPHEADER unset trusted a client-controlled X-Forwarded-By header for header-based proxy authentication. The...
CVE-2021-43798
CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...
grafana-CVE-2018-15727
Grafana CVE-2018-15727 exploit Installation root@kitploit: $ go get github.com/u238/grafana-CVE-2018-15727 Usage root@kitploit: $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for...
AZL-103388 CVE-2026-88806 affecting package libX11 1.8.7-1
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...
CVE-2026-88806
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...
AZL-103391 CVE-2026-88807 affecting package libXrender 0.9.11-1
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
bazad5
bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...
CVE-2026-88807 libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
EUVD-2026-83916
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
CVE-2026-88807
libXrender (X.Org) versions before 0.9.13 are affected by a heap-based buffer overflow in the RenderQueryPictFormats reply handler. A malicious X server can exploit this to inject code into attached X clients. The vulnerability was assigned a CVSS 4.0 score of 8.9 (HIGH) , with active user intera...
CVE-2026-88806 libX11 XkbGetMap Reply Heap-based Buffer Overflow
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...
CVE-2026-88806
libX11 versions before 1.8.14 are vulnerable to a heap-based buffer overflow in the handling of the XkbGetMap reply, specifically overflowing the key_sym_map buffer. A malicious X server can trigger this, leading to potential compromise of confidentiality, integrity, and availability as rated by ...