CVE-2026-95106

Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gitea's web views resolved such a path to the first entry, while git checkout, Gitea Actions, and release archives use the last. A contributor could open a pull request whose diff...

NTP_CVE-2013-5211

NTPCVE-2013-5211 Эксплуатация и проверка CVE-2013-5211...

CVE-2026-106445

The Handlebars template engine is vulnerable to JavaScript Injection in versions 4.0.0 through 4.7.10 . The root cause is an own property check bypass in the lookupProperty function, which returns Function.prototype.constructor before applying the prototype-access deny list. If an attacker can re...

CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Subscriber + Arbitrary Plugin Installation Description A lack of capability checks and insufficient nonce check on the AJAX action in the plugin, made it possible for authenticated users to install arbitrary plugins on vulnerabl...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic 미인증 접근으로 인한 임의 파일 업로드/RCE 취약점 체크 스크립트...

EUVD-2026-93937

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

CVE-2026-103007 Incorrect Authorization in Elasticsearch Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

CVE-2026-101027 Gitea migration SSRF through ALLOWED_DOMAINS address check bypass

When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...

windows-security-cve-2017-8543

Пример InSpec Profile Этот пример показывает реализацию профиля InSpec...

CVE-2026-106511 CVE-2026-106511

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...

EUVD-2026-93662

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...

CVE-2023-26083

CVE-2023-26083 – Утечка адресов ядра GPU Mali через timeline stream Этот репозиторий содержит proof-of-concept PoC эксплойт для CVE-2023-26083 — уязвимости в драйвере GPU Mali Arm Mali GPU Kernel Driver, которая позволяет непривилегированному пользователю раскрывать указатели ядра и...

Microsoft-2024-December-Update-Control

Windows December 2024 Security Patches Audit Script This PowerShell script checks whether the required KB updates for specific security vulnerabilities CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, and CVE-2024-49122 announced in the December 2024 Microsoft security bulletins are installed on...

CVE-2017-5123

CVE-2017-5123 Escalade de privilèges sous Linux exploitant l'appel système waitid. Cet exploit vous est présenté par @XeR0x2A et @chaignc de HexpressoTeam à des fins éducatives uniquement. Le bogue a été introduit le 2017-05-21 et corrigé le 2017-10-09 ; 4.14.0-rc4+ est connu comme vulnérable...

CVE-2026-80727

A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...

CVE-2024-24919-POC

CVE-2024-24919-POC A Simple tool to Automate CVE-2024-24919 Exposure of Sensitive Information Features Easy to Use. Helpful Comments; Can Test Multiple Domains Usage git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ cd CVE-2024-24919-POC; chmod +x CVE-2024–24919.sh ./CVE-2024–24919.sh...

CVE-2026-26287

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.10.0 and prior to version 1.3.2, a bug in the webhook generator initialization order incorrectly cleared the label-enforcement flag EnforceLabel...

USN-8888-1 linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

CVE-2026-8069

От именованного канала Acer к NT AUTHORITY\SYSTEM: CVE-2026-8069 Acer NitroSense и PredatorSense 3.x устанавливали службу Windows под названием PSSvc, которая предоставляла локальным пользователям доступ к пользовательскому протоколу именованных каналов. Одна из команд протокола принимала...