MAL-2026-16248 Malicious code in kartykgithub-takedown-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be4b64316a832dd3482cc41c21d79e2005d5984e2458ed45e957ee761862de31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-4861-PoC

CVE-2023-4861 PoC 本仓库包含针对 CVE-2023-4861 的 Python 概念验证（PoC），该漏洞是 WordPress 插件 File Manager Pro - Filester 中的一个经过身份验证的远程代码执行 问题。 漏洞摘要 CVE：CVE-2023-4861 产品：File Manager Pro - Filester（filester） 受影响版本： 1.8.1 修复版本：1.8.1 漏洞类型：经过身份验证的任意文件上传导致 RCE 所需权限：Filester 上的 Admin+ 权限 此 PoC 的功能 exploit.py...

CVE-2026-41089-Detector

Herramienta de detección CVE-2026-41089 Este es un script de detección CVE-2026-41089 para inspecciones de defensa. Esta vulnerabilidad es una vulnerabilidad de ejecución remota de código en Windows Netlogon revelada por Microsoft en la actualización de seguridad de mayo de 2026. El script no env...

kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability arises when asynchronous cryptographic operations incorrectly handle network packet segments, leaving a pointer to memory that has already been released. An attacker could potentially exploit this use-after-free condition t...

kernel: ipv6: mcast: Fix use-after-free when processing MLD queries

A flaw was found in the Linux kernel's IPv6 multicast mcast component. When processing Multicast Listener Discovery MLD queries, a pointer to the multicast group address is not correctly reloaded after certain packet manipulations. This can lead to a use-after-free vulnerability, potentially...

kernel: ALSA: timer: Fix UAF at snd_timer_user_params()

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. A race condition can occur during the release of a timer object, specifically when the SNDRVTIMERIOCTLPARAMS ioctl is called concurrently. This can lead to a use-after-free vulnerability, potentially...

kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change

A flaw was found in the Linux kernel's SLIP Serial Line Internet Protocol network component. A race condition exists during an MTU Maximum Transmission Unit change when the system reallocates receive buffers. This can allow a remote attacker to trigger an out-of-bounds write or write to a freed...

kernel: ipv6: prevent possible UaF in addrconf_permanent_addr()

A flaw was found in the Linux kernel's IPv6 networking subsystem. Specifically, a Use-after-Free UaF vulnerability exists within the addrconfpermanentaddr function. This issue arises when the system attempts to access an IPv6 address after it has been freed, which could allow an attacker to cause...

FULL-ANALYSIS---CVE-2026-45829-ChromaDB-

CVE-2026-45829 - ChromaDB Pre-Auth RCE CVSS 10.0 ⚠️ WARNING This repository contains a FUNCTIONAL PoC for CVE-2026-45829. ONLY for authorized testing in controlled environments. Description Critical vulnerability in ChromaDB versions 1.0.0 to 1.5.8 that allows an unauthenticated attacker to execut...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 Local Checker Language: 中文 | English This repository provides two standalone local scripts for checking whether a Linux or Windows server has Nginx, OpenResty, or Tengine instances that may be exposed to CVE-2026-42945 related risk. The scripts are read-only. They do not run ...

fix_nginx_cve_2026_42945

NGINX CVE-2026-42945 One-Click Fix Script Automatically detect OS distribution, upgrade NGINX to the fixed version ≥1.30.1, backup configuration, and auto-rollback. Vulnerability Description Vulnerability ID: CVE-2026-42945 Vulnerability Name: NGINX Rift When NGINX processes specific rewrite...

CVE-2018-20062

CVE-2018-20062 ThinkPHP 5.0.23 - CVE-2018-20062 影响验证 受影响版本 ThinkPHP 5.0.x 5.0.23（invokefunction 反序列化） 验证方法 针对此 CVE 的标准影响评估遵循两阶段方法： 1. 存在性检查 — 确认 invokefunction 路由可访问 2. 影响验证 — 执行标准 PoC 并记录 代码运行所在的进程上下文 第 2 阶段在 verifyimpact.sh 中自动化完成，该脚本捕获 完整的 CVE 影响报告所需的执行上下文（uid、主机名、内核）。 使用方法 验证部署的暴露情况，然后执行验证脚本：...

CVE-2025-55182-Simple-Scanner

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

CVE-2024-48990

CVE-2024-48990 !WARNING These files and informations are intended for educational purpose only. The author is not responsible for any malicious behavior. All informations provided are not intended to incite any type of crime or abuse. Description Qualys discovered that needrestart, before version...

CVE-2023-32571

🐞 CVE-2023-32571 - System.Linq.Dynamic.Core Remote Code Execution Proof of Concept for CVE-2023-32571, a remote code execution vulnerability in System.Linq.Dynamic.Core 1.0.7.10 to 1.2.25. This vulnerability allows attackers to execute arbitrary code and commands when untrusted input to methods...

CVE-2025-24893

CVE-2025-24893 XWiki RCE Vulnerability Analysis Environment Setup 1. Running XWiki 15.10.10 Environment root@kitploit: docker-compose up -d 2. Accessing XWiki URL: http://localhost:8080 Proceed with testing after completing the initial setup Create an admin account after accessing the initial...

CVE-2026-20841

CVE-2026-20841 PoC PoC de la vulnerabilidad "Windows Notepad RCE". Descargos 1. NO soy quien descubrió esta vulnerabilidad. Créditos para los autores originales que figuran en la página oficial de divulgación. Simplemente recreé el PoC según la descripción. 2. Personalmente no creo que esta...

React2Shell

React2Shell 📌 React2Shell CVE-2025-55182 React2Shell is the informal name given to a critical Remote Code Execution RCE vulnerability affecting React Server Components RSC and related frameworks like Next.js. Its severity and potential impact have made it a major concern in the web development an...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

CVE-2024-28397-Js2Py-RCE-Exploit

💡 Deep Dive: Click here to read the full technical briefing PDF. CVE-2024-28397: Js2Py Sandbox Escape Payload Generator A professional payload generator for CVE-2024-28397. This tool generates malicious JavaScript code designed to escape the js2py sandbox versions = 0.74 and execute arbitrary...