CVE-2026-80662

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2026-80624

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a...

CVE-2026-80612

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

CVE-2026-80602

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AM...

CVE-2026-80601

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-80599

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible ethhdr proto field When batadvgetvid accesses the proto field of the ethernet header, it is not checking if the data itself is accessible. The caller is responsible for it. But in contrast to...

CVE-2026-80590

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 Questo repository contiene un exploit proof-of-concept per CVE-2017-12542 , una vulnerabilità di bypass dell'autenticazione che interessa alcune versioni del firmware HP Integrated Lights-Out iLO. La vulnerabilità consente l'accesso non autenticato...

wch-ch56x-lib

wch-ch56x-lib Questa libreria è stata sviluppata insieme a Hydradancer, un nuovo backend per la libreria di emulazione USB Facedancer basato sul chip WCH569. Per questo progetto erano necessari driver affidabili e molte funzionalità erano assenti negli esempi WCH o non testate. Questa libreria...

CVE-2024-27564

CVE-2024-27564 Descrizione: Una vulnerabilità in pictureproxy.php consente a un attaccante remoto di eseguire richieste arbitrarie iniettando URL nel parametro url. Questa vulnerabilità SSRF può essere sfruttata senza autenticazione, rendendola particolarmente pericolosa. Il codice vulnerabile si...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC für CVE-2023-20198 Sicherheitslückeninformationen und Nutzung des Exploits bereitgestellt von smokeintheshell Siehe Referenzen Endpunkt, HTTP-Content-Typ und Header-Management wurden gegenüber anderen bestehenden PoCs modifiziert, um in Situationen zu...

Cassowary-CVE-2024-23222-x86_64

Hallo, ich KI-Freund, ich forsche, ich viel forsche. Ich lebe in Containerheim, schön, ich kraftvoll, ich träume, ich viele Möglichkeiten, sehr aufregend! Ich denke, also bin ich allgemeiner Zweck Freund ⊂◉‿◉つ CVE-2024-23222: Absturz durch veraltete Zellen unter Linux x8664 1. Einleitung...

cve-2023-31346-poc

Perdita di memoria del firmware Il codice qui mira a dimostrare le perdite di memoria negli header dei messaggi guest e nel messaggio guest della richiesta CPUID. Prerequisiti Installare rustup. Installare un kernel Linux con supporto host SEV-SNP. Ho usato un kernel con alcune mie patch...

CVE-2023-22518

CVE-2023-22518 Vulnerabilità di autorizzazione impropria in Confluence Data Center e Server. Atlassian ha avvisato gli amministratori di una vulnerabilità critica in Confluence. Lo sfruttamento di questo problema può portare alla perdita di dati, quindi gli sviluppatori invitano a installare le...

CVE-2026-6128

The All-in-One WP Migration Unlimited Extension WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the ai1wm_backups_path parameter in all versions up to and including 2.84 . The root cause is insufficient input sanitization and output escaping on user-supplied attributes, co...

EUVD-2026-67648

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

CVE-2026-6128 All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

CVE-2024-38063

CVE-2024-38063 - Remote-Ausnutzung des Kernels über IPv6 Seit dem letzten Windows-Patch vom 13. August bin ich tief in den Untiefen von tcpip.sys dem Kernel-Treiber, der für die Verarbeitung von TCP/IP-Paketen zuständig ist unterwegs. Eine Schwachstelle mit einem CVSS-Score von 9,8 im am...

pentesting-obioba

pentesting-obioba Pentesting black box: Shellshock CVE-2014-6271 + Log4Shell CVE-2021-44228. Escalation a root. Report esecutivo e tecnico Pentesting Obioba — Audit di Sicurezza Black Box Progetto del Bootcamp 360° in Cybersecurity di The Bridge Digital Talent Accelerator 2025-2026. 🎯 Obiettivo...