1324001 matches found
EUVD-2026-109216
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
Fugu15
Fugu15 Fugu15 is a semi-untethered permasigned jailbreak for iOS 15. It contains a code-signing bypass, kernel exploit, kernel PAC bypass and PPL bypass. Additionally, it can be installed via Safari, i.e. a computer is not required, except for a Web Server that hosts Fugu15. Please note that Fugu...
CVE-2021-28476
CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...
CVE-2017-11882
CVE-2017-11882 Article Link Office Remote Code Execution Vulnerability Hidden for 17 Years CVE-2017-11882 http://www.cnblogs.com/Hi-blog/p/7878054.html...
MAL-2026-18248 Malicious code in overarch-windows-x64-yr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f1fa32ec925a11dad1e6efa7e1884b1cc263e28f153658b5a9d79e1e7a3236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
🛡️ PHP2Shell Sentinel PHP Runtime Vulnerability Assessment...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-stale-global-uaf Someone on the internet can talk to your...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-oom-longjmp Someone on the internet can talk to your PHP...
MAL-2026-18247 Malicious code in @liauto/win32-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b21b90b1f7b784f09be79386162a6d31ac2c89649a3dff65fbf67456594251 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-80829
A flaw was found in the Linux kernel's ALSA USB audio driver. A local attacker with a specially crafted USB device could exploit this vulnerability. By providing a malformed wMaxPacketSize value, the device can trigger an out-of-bounds write in the kernel's memory. This memory corruption could le...
CLSA-2026-1792807762 vim: Fix of 3 CVEs
CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion upstream 9.2.0845 - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling upstream 9.2.0480 - CVE-2026-47167: fix Ruby code execution via a crafted pattern in the...
How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected...
hackcar-writeup
Hackcar - Writeup Platform: DockerLabs Difficulty: Medium more or less, it has its quirks Objective: From webuser to root by breaking a Next.js The start: reconnaissance As always, first things first: see what we're up against. nmap -sC -sV -T4 172.17.0.2 PORT STATE SERVICE VERSION 8080/tcp open...
[SECURITY] [DLA 4856-1] xdg-dbus-proxy security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4856-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 23, 2026 https://wiki.debian.org/LTS -...
Codecepticon
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Codecepticon for the latest version. Codecepticon Table of Contents Introduction Read This First Prerequisites Visual Studio Roslyn Compiler Check to see if it works Using Codecepticon C VBA/VB6 PowerShell Obfuscating Command Li...
Exploit for CVE-2026-102785
█████╗ ███╗ ██╗ ████████╗ ██╗ ██████╗ ██████╗ ██████...
MGASA-2026-0538 Updated bluez package fixes security vulnerabilities
Out-of-bounds read in avrcp parsemediaelement and parsemediafolder. CVE-2026-75032 Unprivileged-local and adjacent-LE-peer leads to arbitrary code execution as root. CVE-2026-80185 Stack Overflow in name2utf8 causes DoS and potential code execution. CVE-2026-80186 AVRCP ListPlayerAttributes Doubl...
Updated bluez package fixes security vulnerabilities
Out-of-bounds read in avrcp parsemediaelement and parsemediafolder. CVE-2026-75032 Unprivileged-local and adjacent-LE-peer leads to arbitrary code execution as root. CVE-2026-80185 Stack Overflow in name2utf8 causes DoS and potential code execution. CVE-2026-80186 AVRCP ListPlayerAttributes Doubl...
Secure and Functional Code Generation with Self-Evaluation
Large Language Models LLMs can generate functionally correct code that remains insecure. Security-focused fine-tuning can be expensive and is not always available, motivating inference-time approaches. Security-oriented prompting and retrieval can reduce vulnerabilities, but may also remove...