EUVD-2026-89109

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102808

PX4 Autopilot versions through 1.17.0 are vulnerable to a NULL pointer dereference within the sd_stress command. The root cause is the lack of validation for the -b byte count parameter before it is processed by malloc() and memset(). An attacker with shell access, which can be obtained via MAVLi...

CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

EUVD-2026-89108

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

CVE-2026-102809

PX4 Autopilot versions through 1.17.0 are vulnerable to a stack exhaustion vulnerability within the file2 test command. The root cause is a failure to validate the write chunk size parameter , allowing an attacker with shell access to provide an excessively large value to the -c option . This act...

CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

RedTeamSimmer

RedTeamSimmer Интерфейс, о котором вы всегда мечтали для Atomic Red Team Веб-платформа эмуляции противника и оркестрации тестов Atomic Red Team. Обзор RedTeamSimmer — это открытая веб-платформа эмуляции противника, предоставляющая современный интерфейс для оркестрации тестов Atomic Red Team в...

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft. The campaigns, aimed at people and organizations tied to Ukraine, have affected more than 100 organizations since...

CVE-2026-102796

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2022-51019

Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command execution. Authenticated users with admin panel access can inject shell metacharacters into the alias parameter to...

CVE-2026-46394-haxcms-git-command-injection

CVE-2026-46394 - Injection de commandes OS CWE-78 dans Git.php de HAXcms Preuve de concept pour tests de sécurité autorisés et recherche uniquement. La vulnérabilité décrite ici est corrigée dans la dernière version de HAXcms. Cette PoC est publiée afin que les défenseurs et les chercheurs puisse...

Exploit for Code Injection in Craftcms Craft_Cms

CVE-2026-31857 - CraftCMS RCE exploit Python exploit for a RC...

Clematis

Clematis 中文 | English 🛠️ Мощный инструмент для преобразования PE-файлов EXE/DLL в позиционно-независимый шеллкод. ✨ Ключевые возможности Поддержка преобразования PE-файлов EXE/DLL в шеллкод Совместимость с архитектурами x86 и x64 Поддержка аргументов командной строки Встроенный алгоритм сжатия...

siphondns

SiphonDNS PoC-демонстрация техник, описанных в этом исследовании. Реализует эксфильтрацию данных через нестандартные разделы DNS. Сервер: $ ./siphondns-server -method ecs Starting DNS server cmd id Command received Receiving...

CVE-2026-90898

cve-id Пожертвование Помогите поддерживать этот проект Если вы находите этот проект полезным, пожалуйста, рассмотрите возможность поддержки его дальнейшего сопровождения через PayPal или ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Десять процентов от...

windows-api-function-cheatsheets

Шпаргалки по функциям Windows API Контакты 🌨️ Snowcrash: [email protected] Оглавление Шпаргалки по функциям Windows API Файловые операции Управление процессами Управление памятью Управление потоками Управление динамически подключаемыми библиотеками DLL Синхронизация Межпроцессное...