CVE-2024-6387

0. TL;DR This is essentially a statistical vulnerability: it requires a large number of attempts to win the race condition and successfully execute arbitrary code. Attackers need to overcome many obstacles, "Schwartz told SecurityWeek." Even in the best case, the most well-known vulnerabilities...

CVE-2026-98025

A flaw was found in the Linux kernel's cx82310eth USB Ethernet driver. An attacker connecting a malicious USB device can trigger a heap-based buffer overflow by sending crafted packets containing a reboot indicator. Because the driver fails to discard the packet after detecting the reboot signal,...

[SECURITY] [DSA 6527-1] rsync security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6527-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 28, 2026 https://www.debian.org/security/faq -...

CVE-2026-98016

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A race condition occurs during the concurrent teardown of traffic control TC sample rules sharing the same context, causing the system to reference memory after it has already been freed. A local user with network administrativ...

CVE-2026-86950

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

CVE-2026-12717

A flaw was found in BigQuery Data Transfer Service. An authenticated attacker can achieve arbitrary code execution within the connector container by supplying crafted Java Database Connectivity JDBC connection string parameters. Successful exploitation can further allow the attacker to escalate...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - Reflected XSS Vulnerability in HotelDruid 3.0.7 Description Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint Severi...

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950 , refers to an out-of-bounds write impacting the CoreGraphics component that could lead...

CVE-2026-86950

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

CVE-2026-86950

The CoreGraphics framework, a core component used by Apple for processing visual content like images and PDFs, contains an out-of-bounds write vulnerability. This flaw occurs when the software writes data beyond its allocated memory limits, potentially allowing an attacker to execute arbitrary co...

CVE-2026-86950

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

EUVD-2026-88445

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

CVE-2023-27326

Parallels Desktop VM 탈출 이 저장소는 Parallels Desktop의 취약점CVE-2023-27326에 대한 익스플로잇을 포함하고 있습니다. 이 취약점은 로컬 공격자가 영향을 받는 Parallels Desktop 설치에서 권한을 상승시킬 수 있도록 합니다. 이 익스플로잇은 Parallels Desktop 버전 18.0.0 53049에서 테스트되었으며, 취약점은 18.1.1 53328 보안 업데이트에서 패치되었습니다. 취약점 세부 정보 특정 결함은 Toolgate 구성 요소에 존재합니다. 이 문제는 파일 작업...

CVE-2020-12753-PoC

CVE-2020-12753-PoC 이 저장소는 LG Stylo 4 AMZ/Q710ULM에서 Secure EL3 임의 코드 실행을 위한 SBL1/aboot 취약점인 🔋📱❄️🥾🔓의 개념 증명PoC을 포함합니다. 업데이트 20a 및 20c와 취약점의 SBL1 변형에서만 테스트되었습니다. - Makefile : Builds rawresourcesamod.img given sblrop.s and rawresources.img884736 - rawresources.img884736 : Original rawresources...

CVE-2026-101909

A flaw was found in axios. In applications affected by prototype pollution, where an attacker can modify base JavaScript object properties, axios processes inherited options during form data serialization without verifying property ownership. An attacker can leverage this behavior to trigger a...

CVE-2024-4367-hands-on-01

!IMPORTANT 본 리포지토리는 취약점을 학습하기 위한 것입니다. 본 핸즈온은 반드시 자신이 관리하는 적절한 컴퓨터에서 진행해 주십시오. 불법 행위는 절대 하지 마십시오. 또한 본 리포지토리로 인해 발생한 일체의 손해·책임을 작성자는 지지 않습니다. CVE-2024-4367-hands-on CVE-2024-4367을 체험하는 핸즈온 poc.pdf 작성 python CVE-2024-4367-PoC/CVE-2024-4367.py "alert'document.domain'" 출처:...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer determines where a given Domain Name Server DNS gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer. Problem Stack-based buffer overflow in dnstracer through 1.9 allows attackers to execute...

CVE-2024-4947-PoC

CVE-2024-4947 — V8 Maglev 타입 혼동 → 완전한 RCE d8 PoC CVE-2024-4947V8 Maglev 타입 혼동에 대한 완전하고 자체 포함된self-contained 익스플로잇 체인으로, 초기 타입 혼동 트리거에서부터 임의 코드 실행 에 이르기까지 전체를 아우릅니다. 이 PoC는 비-샌드박스non-sandboxed d8 빌드를 대상으로 실행되며, 코드 실행 증명으로 CVE-2024-4947-PWNED를 stdout에 출력합니다. ⚠️ 이는 패치된 공개 취약점에 대한 연구/교육용 PoC입니다. V8 셸의...

CVE-2024-46209

Redaxo Security Research CVE-2024-46209, CVE-2024-46210 Redaxo CMS v5.17.1 security research Completed at 09 August 2024 Contains detailed description of: CVE-2024-46210 - Stored Cross-Site Scripting via file Upload in MediaPool module CVE-2024-46209 - Authenticated arbitrary code execution...

CVE-2023-27326

Parallels Desktop VM 탈출 이 저장소에는 CVE-2023-27326으로 지정된 Parallels Desktop 취약점에 대한 익스플로잇이 포함되어 있습니다. 이 취약점은 로컬 공격자가 영향을 받는 Parallels Desktop 설치 환경에서 권한을 상승시킬 수 있게 합니다. 이 익스플로잇은 Parallels Desktop 18.0.053049 버전에서 테스트되었으며, 해당 취약점은 18.1.153328 보안 업데이트에서 패치되었습니다. 취약점 세부 정보 구체적인 결함은 Toolgate 구성 요소에 존재합니다....