openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

A flaw was found in the Linux kernel's SCSI target subsystem. This vulnerability, a buffer overflow, occurs in the tgptgpmembersshow function when processing long iSCSI IQN names. An attacker could potentially exploit this by providing a specially crafted input, leading to the disclosure of...

kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

A flaw was found in the Linux kernel's handling of IPv6 extended headers. Specifically, the ipv6hopjumbo function, which processes jumbo payloads, can modify internal packet buffer skb pointers. However, the network header nh pointer is not recomputed after these modifications. This oversight cou...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

Invoke-ArgFuscator

░█░█▄░█░█▒█░▄▀▄░█▄▀▒██▀░▒░ ▄▀▄▒█▀▄░▄▀▒▒█▀░█▒█░▄▀▀░▄▀▀▒▄▀▄░▀█▀░▄▀▄▒█▀▄░ ░█░█▒▀█░▀▄▀░▀▄▀░█▒█░█▄▄░▀▀░█▀█░█▀▄░▀▄█░█▀░▀▄█▒▄██░▀▄▄░█▀█░▒█▒░▀▄▀░█▀▄░ Invoke-ArgFuscator Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common...

zombie-zip

Zombie ZIP ZIP format confusion technique that evades 98% of antivirus engines. CVE-2026-0866 | VU976247 | Published March 10, 2026 The Technique Create a ZIP file where: Compression Method = 0 STORED Actual data = DEFLATE compressed CRC-32 = Checksum of uncompressed payload AV Engine: Reads Meth...

CVE-2020-24148

CVE-2020-24148 Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action. Vulnerable code: /moove-actions.php: ... public function moovereadxml $args = array 'data' = escsql wpunslash $POST'data' ,...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

CertificateDsc

CertificateDsc Code of Conduct This project has adopted this code of conduct. Releases For each merge to the branch main a preview release will be deployed to PowerShell Gallery. Periodically a release version tag will be pushed which will deploy a full release to PowerShell Gallery. Contributing...

CVE-2019-16113-PoC

CVE-2019-16113 PoC Bludit = 3.9.2 Remote Code Execution Vulnerability via "Upload function". Simple Python PoC. Discovery by @christasa: https://github.com/bludit/bludit/issues/1081 Usage Edit the script with your URL, username, password and command to execute then run the script: $ python...

Brovan

Brovan "Emulate like a bro" - for your emulation services. Brovan is a powerful user-mode binary emulator for inspecting and running x8664 programs in a controlled emulated environment. It supports PE, ELF, memory dumps, and even raw files with no recognized file format. It is a tool used to...

p3-loader

P³-Shellcode Loader - Process Parameter Poisoning Authors: Max Hirschberger & Ogulcan Ugur Contents 1. Introduction 2. Typical Process Injection and Involved System APIs 3. Technical Foundation of Required Windows Internals 3.1 Process Creation API and Startup Parameters 3.2 The Process Environme...

EUVD-2026-104080

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

Cryptolocker

DISCLAIMER : OUR TOOLS ARE FOR EDUCATIONAL PURPOSES ONLY. DON'T USE THEM FOR ILLEGAL ACTIVITIES. YOU ARE THE ONLY RESPONSABLE FOR YOUR ACTIONS! OUR TOOLS ARE OPEN SOURCE WITH NO WARRANTY AND AS ARE. Cryptolocker Crypto is open source Crypto-Locker. Crypto is developed in Visual C++. It has featur...

CVE-2026-112083 sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

CVE-2026-112083 sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

CVE-2026-112083

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

CVE-2026-112083

A security flaw in sgl-project SGLang up to version 0.5.19 allows for a remote denial of service (DoS). The vulnerability exists in the Weight Exporter component, specifically within the WeightExporter.send_weights_to_remote_instance function located in the file python/sglang/srt/model_executor/m...

CVE-2026-112083 sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

sk-cve-2026-26030-lab

CVE-2026-26030 — Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...