0days-in-the-wild

0-days इन-द-वाइल्ड में शोषित यह रिपॉजिटरी 0-day कमजोरियों के बारे में दस्तावेज़ों का एक संदर्भ है, जिन्हें इन-द-वाइल्ड में शोषित के रूप में पहचाना गया है। इसमें प्रत्येक 0-day शोषण के लिए मूल कारण विश्लेषण RCAs के साथ-साथ प्रत्येक 0-day को ट्रैक करने वाली एक तालिका भी शामिल है। ये दस्तावेज़ Githu...

threat-team

Google खतरा खुफिया समूह सूचना: यह भंडार अब बनाए नहीं रखा गया है। नवीनतम समझौता संकेतक IOC और खतरा अनुसंधान के लिए, कृपया Google Cloud Threat Intelligence ब्लॉग और मुफ्त Google Threat Intelligence / VirusTotal संग्रह देखें। इस भंडार में 2021 से 2026 की शुरुआत तक Google द्वारा प्रकाशित सार्वजनिक...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry 2024 - List of Past DeFi Incidents 180 incidents included. 20241227 Bizness - Reentrancy Lost: 15.7k USD root@kitploit: forge test --contracts ./src/test/2024-12/Biznessexp.sol -vvv Contract Biznessexp.sol Link reference...

CVE-2022-4262

CVE-2022-4262 CVE-2022-4262 का पूर्ण विश्लेषण मूल कारण, PoC, शोषण और स्लाइड्स सहित। अस्वीकरण यह भंडार केवल शैक्षिक उद्देश्यों के लिए है और इसका उपयोग किसी भी दुर्भावनापूर्ण गतिविधि के लिए नहीं किया जाना चाहिए।...

Dirty-Frag-Research-CVE-2026-43284-

CVE-2026-43284 Dirty Frag – लिनक्स कर्नेल भेद्यता अनुसंधान अवलोकन यह रिपॉजिटरी CVE-2026-43284 Dirty Frag पर केंद्रित एक संपूर्ण रक्षात्मक सुरक्षा अनुसंधान परियोजना का दस्तावेजीकरण करती है, जो XFRM/IPsec नेटवर्किंग सबसिस्टम को प्रभावित करने वाली एक लिनक्स कर्नेल भेद्यता है। इस परियोजना का उद्देश्य...

Nobody Is Saying Why OpenAI and Anthropic Had Outages Today

ChatGPT, Claude, and Grok all suffered outages at nearly the exact same time for reasons that remain murky...

1day-archive

1dayexploit - archive Technical deep-dives and root cause analyses of recently disclosed CVEs. About This repository collects technical write-ups of recently disclosed CVEs — the 1-day window between patch release and widespread exploitation. Each analysis contains: Affected product, vendor, and...

CVE-2022-4262

CVE-2022-4262 CVE-2022-4262 का पूर्ण विश्लेषण मूल कारण, PoC और एक्सप्लॉइट सहित।...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root...

CVE-2026-19243 HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection

A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed...

CVE-2026-70378

The CVE describes imagecli: negative values for carve ratio in Carve::apply() (src/image_ops.rs) are not validated to be positive. With ratio <= 1.0 only asserted, a negative ratio can drive the computed target width to 0 via Rust’s float-to-uint cast, then be passed to imageproc::seam_carving...

CVE-2026-10772

DUPLICATE This CVE Record has been rejected by the Zephyr Project CNA. CVE-2026-10772 was assigned to a vulnerability already covered by CVE-2026-2411, which was assigned earlier for the same defect: the Bluetooth GATT notify/indicate paths check the permissions of the Characteristic Declaration...

CVE-2026-62959

Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...

kernel-nday-exploits

Linux Kernel N-Day Exploits Local privilege escalation rese...

CVE-2026-47394

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcpserver/adapters/clitools.py. Commit 68cc9427 "fixsecurity: harden MCP rules path handling…" adde...

CVE-2026-57245 Foxit PDF Editor/Reader Signature Hyperlink Use-After-Free Vulnerability

When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combinations. This results in the internal objects entering an invalid state. Eventually, during the destruction phase, an...

EUVD-2026-38129

vLLM versions = 0.10.2 and 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed negative or out-of-bounds tensor indices, when the...

Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash

...

BIT-JENKINS-2026-53441

Jenkins 2.483 through 2.567 both inclusive, LTS 2.492.1 through 2.555.2 both inclusive does not escape the user-provided description of a generic offline cause that could be set through the POST config.xml API, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers...

Cross-site Scripting (XSS)

Overview org.jenkins-ci.main:jenkins-core is an open source automation server. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the description field of a generic 'offline' cause set via the POST config.xml API. An attacker with Agent/Configure permission can execut...