2229898 matches found
kernel: smb: client: fix double-free in SMB2_close() replay
A flaw was found in the Linux kernel's Server Message Block SMB client. A vulnerability exists in the SMB2close replay mechanism where a response buffer can be freed twice. This double-free condition can lead to memory corruption, potentially resulting in a denial of service or the execution of...
kernel: rhashtable: clear stale iter->p on table restart
A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...
kernel: ipv6: mcast: Fix use-after-free when processing MLD queries
A flaw was found in the Linux kernel's IPv6 multicast mcast component. When processing Multicast Listener Discovery MLD queries, a pointer to the multicast group address is not correctly reloaded after certain packet manipulations. This can lead to a use-after-free vulnerability, potentially...
Terrminus-CVE-2026-2406
Terminus - CVE-2026-24061 Scanner & Exploitation Framework A security analysis engine for CVE-2026-24061 Telnet NEWENVIRON authentication bypass and privilege escalation vulnerability. Overview Terminus is a professional security research tool designed for authorized penetration testing and...
OpenSource-ERP-SQL-Injection
OpenSource-ERP-SQL-Injection OpenSource ERP application has SQL Injection vulnerability. CVE-2019-5893 https://vulners.com/cve/CVE-2019-5893 https://www.exploit-db.com/exploits/46118 PoC - Get DB name root@kitploit: POST /db/utils/query/data.xml HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.3;...
CVE-2026-5281-Research-Toolkit
CVE-2026-5281 Research Toolkit Chrome WebGPU Use-After-Free CWE-416 This toolkit is for security research and defensive verification around CVE-2026-5281. Patched Chrome version: 146.0.7680.178 Potentially vulnerable versions: anything below 146.0.7680.178 Files cve20265281scanner.py Unified...
EUVD-2026-75218
Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering siam-server 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrator...
CVE-2026-87520
creationtimestamp| type| source ---|---|--- 2026-09-10 00:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4scut4qa2y 2026-09-10 04:49:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 11:37:07+00:00| seen|...
Ashwesker-CVE-2026-21440
🚨 CVE-2026-21440 — Critical Security Vulnerability 🧩 Summary CVE-2026-21440 is a critical path traversal vulnerability affecting the AdonisJS framework, specifically its multipart file upload handling. ⚠️ If exploited, attackers can write files anywhere on the server , potentially leading to remot...
CP-PLUS-EZ-P21-CVE-2026-65893-65894
🔐 Security Analysis of the CP PLUS EZ-P21 IP Camera CVE-2026-65893 CVE-2026-65894 Arbitrary Code Execution & Improper Authentication – CP PLUS EZ-P21 IP Camera Overview This repository documents two security vulnerabilities identified in the CP PLUS EZ-P21 IP Camera , an IP-based surveillance...
pii-shield v2.2.3
PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. "Don't let PII poison your AI models."...
cryptography-research-demo
Artifacts for "Further Single-Key Recovery Attacks on Reduced-Round AES" Source code for every experiment quoted in the paper. No measurement output or prebuilt table is bundled: each program prints or writes its own results, so every number can be regenerated from scratch...
CVE-2025-49844
🚨 CVE-2025-49844 RediShell - Complete Guide ⚠️ Just for Learning, Not Hacking ; ⚠️ Hey! This is a simple tool I made to help people check if their Redis servers are vulnerable to the bug. It's not meant for actual attacks - just for learning and protecting your own stuff. What's This All About?...
binviz
binviz Binary visualiser & triage tool: linked interactive views entropy, histograms, image/dot-plot surfaces, control-flow graphs over a single shared address-space model. root@kitploit: pipx install binviz && binviz serve What it does Open a file and every view is looking at the same address...
context-aware-offensive-intelligence
%PDF-1.5 % 15 0 obj endobj 17 0 obj stream x ŽnY+˶bĎc'␐:\WH.s4@K rKii-yPz vGhw4DT+.2^nxE;FS͋\n$5?Eѿtwvor%^xwO"kbUuK;\ Q&enut5m!$Vn+ U%&u7뚰/N\F1h0եyجIRWh48iRYAW?R$aΈğQJht,s7? F,sRiϢpӇؗn%j2ҾCUGᛰt-7"j:5J&az5Rwcj"h+KdįFrZ;Fԕ2ߺdЬUYj8hG鸏zp47wESV'J=h+ep8p8p8 W.hnw 8g:pKah4CA˧ztO3tF7J\ݍt|,PBsrؿ...
cve_2026_34621_advanced
CVE-2026-34621 Advanced Exploit Generator A sophisticated, cross-platform exploit generator for CVE-2026-34621 – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code execution on Windows and macOS. ⚠️ IMPORTANT DISCLAIMER This too...
LeakGauge
LeakGauge This is the code repository for our paper: The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges. ArXiv version and paper link: https://arxiv.org/abs/2608.17829 This repository implements the LeakGauge pipeline for leakage detection: demo dataset preparation,...
CVE-2026-0300-POC
🛡️ CVE-2026-0300: PAN-OS User-ID™ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write 📌 Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-ID™ Authentication Portal Captive Portal. This research repository...
RLSA-2026:65887 Important: perl-DBI security update
DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: Incomplete fix for...
perl-DBI security update
An update is available for perl-DBI. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DBI is a database access Application Programming Interface API for the Perl...