CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2024-48990

CVE-2024-48990 Exploit para CVE-2024-48990 Escalada de privilegios local en needrestart 3.8 Antecedentes Lee https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart. Qualys hace un gran trabajo...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0482

The AMD Versal™ Adaptive SoC devices are vulnerable to a buffer overflow due to insufficient boundary checks within the USB boot mode . This vulnerability can be triggered by providing crafted images when USB boot mode is enabled through specific board modifications . Successful exploitation allo...

CVE-2019-9766

CVE-2019-9766 利用 Free MP3 CD Ripper2.6 版本存在的缓冲区溢出漏洞，构造特殊的 MP3 文件，攻击者在使用播放器进行播放时，音频文件蜜饵利用缓冲区溢出漏洞执行任意代码。 复现 攻击机：kali201903 192.168.198.142 受害机：windows10 21H1 192.168.198.137 在受害机上安装好 Free MP3 CD Ripper 2.6，在 kali 机上利用 MSF 生成反向连接 shellcode： msfvenom -p windows/meterpreter/reversetcp...

CVE-2026-102828

A flaw was found in simple-git. The default security filter designed to block unsafe Git operations does not prevent trailer command configurations from being set. If an application passes untrusted user input into Git configuration options, an attacker can exploit this flaw to achieve arbitrary...

CVE-2026-78861

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

CVE-2026-78860

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

CVE-2026-78862

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

CVE-2024-23692

POC - Vulnerabilidad de RCE no autenticada en Rejetto HTTP File Server - CVE-2024-23692 Resumen POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 es una vulnerabilidad crítica en Rejetto HTTP File Server HFS versión 2.3m, que permi...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - Reflected XSS Vulnerability in HotelDruid 3.0.7 Description Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint Severi...

CVE-1999-1053-PoC

CVE-1999-1053 概念验证漏洞利用 背景 此概念验证（PoC）漏洞利用的灵感来源于 HKCERT CTF 2022 中名为 CVE 1999 的 CTF Web 挑战赛。（相关 Writeup 链接） 信息 描述： 在 Matt Wright Guestbook Matt Wright 的 guestbook.pl = v2.3.1 CGI 脚本存在一个可能允许任意命令执行的缺陷。该漏洞要求在 guestbook.pl 脚本中启用了 HTML 发布功能，并且 Web 服务器必须为 '.html'...

CVE-2024-32002

CVE-2024-32002 一个简单的概念验证，执行计算器（仅限 macOS 示例）。使用 git clone --recursive 命令时，此仓库还会拉取 https://github.com/markuta/hooky，其中包含一个 post-checkout 脚本。主要基于修复提交 t7406-submodule-update.sh 文件。 运行 注意 ：低于 2.45.1、2.44.1、2.43.4、2.42.2、2.41.1、2.40.2 和 2.39.4 的版本均受影响。 git clone --recursive...

CVE-2023-27326

Parallels Desktop 虚拟机逃逸 该仓库包含针对 Parallels Desktop 漏洞（编号 CVE-2023-27326）的利用代码。此漏洞允许本地攻击者在受影响的 Parallels Desktop 安装实例中提升权限。 该利用代码已在 Parallels Desktop 18.0.0 53049 版本上测试通过，该漏洞已在 18.1.1 53328 安全更新 中被修复。 漏洞详情 具体缺陷存在于 Toolgate 组件中。问题源于在使用用户提供的路径进行文件操作之前，缺乏对路径的正确验证。攻击者可利用此漏洞提升权限，并在主机系统上当前用户的上下文中执行任意代码。...

CVE-2020-12753-PoC

CVE-2020-12753-PoC Este repositorio contiene una prueba de concepto para 🔋📱❄️🥾🔓, una vulnerabilidad SBL1/aboot para ejecución de código arbitrario en Secure EL3 en el LG Stylo 4 AMZ/Q710ULM. Solo se ha probado en las actualizaciones 20a y 20c y con la variante SBL1 de la vulnerabilidad. - Makefile...

CVE-2024-4367-hands-on-01

!IMPORTANT Este repositorio es para aprender sobre vulnerabilidades. Realice este taller únicamente en un ordenador adecuado que usted gestione. No realice nunca actividades ilegales. Además, el autor no se hace responsable de ningún daño o responsabilidad derivados de este repositorio...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

CVE-2026-101919

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...

[SECURITY] [DSA 6544-1] sabnzbdplus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6544-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6543-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6543-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2026 https://www.debian.org/security/faq -...