stack-smasher

stack-smasher A stack buffer overflow exploitation lab built...

CVE-2026-91734

A flaw was found in Google Chrome. This incorrect authorization vulnerability allows a local attacker to execute arbitrary code outside of the browser's security sandbox by using a local program. This could lead to a complete compromise of the affected system...

CVE-2026-91728

A flaw was found in V8, the JavaScript engine used in Google Chrome. An integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2025-24893_Analysis

CVE-2025-24893 - XWiki SolrSearch SSTI 导致未认证 RCE 一个自包含的 Docker 实验环境，用于复现 CVE-2025-24893——XWiki SolrSearch RSS 源中的服务端模板注入（Server-Side Template Injection，SSTI），该漏洞可导致未认证的远程代码执行（RCE）。它运行存在漏洞的 15.10.10 版本和已修复的 15.10.11 版本，因此可以展示同一个请求在一个版本上成功、在另一个版本上失败。 关于 AI 工具使用的说明。 在准备本项目时，我有限地使用了两个 AI 助手——Anthropi...

Ivanti-Connect-Around-Scan

Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker 概要 機能 チェックの種類 WEB ACCESS SYSTEM INFO BYPASS DETECTED ステータスタイプの説明 はじめに 必要条件 使用方法 引数 ターゲット指定 カスタム変数 出力のスタイリング To Do コントリビューションガイドライン 問題の報告 プルリクエストの提出 意図された用途と免責事項 目的 免責事項 ライセンス 謝辞 作者について 概要 Connect...

MAL-2026-16198 Malicious code in kartykp-token-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac4fed2b4d7ba3f64ee350b15e782732191843a11b1c5789218b0899da554f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kartykp-token-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac4fed2b4d7ba3f64ee350b15e782732191843a11b1c5789218b0899da554f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-91724

A flaw was found in Chromium. This use-after-free vulnerability in the Input component allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a crafted HTML page, leading to a...

scambuster

Automated Scambaiting Honeypot & Threat Intelligence Platform Most security programs block and forget: the mail goes, the attacker's infrastructure and money rails stay unobserved. ScamBuster engages instead, inbound-only and under policy, turning the exchange into IOCs, actor profiles and tagged...

CVE-2026-91747

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...

CVE-2026-91736

A flaw was found in Chromium. This use-after-free vulnerability in the Document Object Model DOM allows a remote attacker to execute arbitrary code within the sandbox. By enticing a user to visit a specially crafted HTML page, the attacker can exploit this flaw, leading to unauthorized code...

CVE-2026-91713

A flaw was found in the Browser component of Google Chrome. A remote attacker, after compromising the renderer process, could exploit missing authorization to spoof user interface UI elements. This could lead to a user being deceived by malicious UI, potentially enabling further attacks...

CVE-2026-91709

A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit a type confusion vulnerability by enticing a user to visit a crafted HTML page. This could lead to arbitrary code execution within the sandbox environment...

CVE-2018-17431-Comodo

CVE-2018-17431-PoC CVE-2018-17431 概念验证 漏洞标题：Comodo Firewall & Central Manager UTM 所有 2.7.0 及 1.5.0 之前的版本远程命令执行（基于 Web Shell） 漏洞作者：Milad Fadavvi 厂商主页：https://www.comodo.com/ 软件链接：https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9276&af=9276 版本：2.7.0 及 1.5.0 之前...

CVE-2026-92257

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...

DEBIAN-CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-76864

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...

ziti v2.0.5

OpenZiti OpenZiti is an open-source zero-trust networking platform that makes network services invisible to unauthorized users. Every connection, whether from a user, a service, a device, or a workload, is authenticated with cryptographic identity, authorized by policy, and encrypted end-to-end...