303862 matches found
CVE-2026-48908-joomla-sp-page-builder-detection
CVE-2026-48908 โ Joomla SP Page Builder Validation and Detection Laboratory validation of CVE-2026-48908 in the Joomla SP Page Builder component, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in which the SP...
mcpshield
mcpshield A drop-in fix for the unpatched MCP STDIO command-injection flaw the CVE-2026-30623 family, disclosed by OX Security in April 2026 as "by design" -- no SDK patch is coming. Import one line, and every stdio MCP server your Python app launches gets its command/args/env validated before th...
pentest-writeups
pentest-writeups Kioptrix Level 1 ๆธ้ๆต่ฏๆฅๅ - CVE-2003-0201 Samba trans2open Kioptrix Level 1 โ ๆธ้ๆต่ฏๆฅๅ ไฝ่ ๏ผ Amirbek Raxmatullayev @americo444 ๆฅๆ๏ผ 2026-06-17 ๅนณๅฐ๏ผ VulnHub ้พๅบฆ๏ผ ๅ ฅ้จ ็ฎๆ ๏ผ ่ทๅ root ๆ้ 1. ็ฏๅขๆญๅปบ ็ปไปถ| ่ฏฆๆ ---|--- ๅฎฟไธปๆบๆไฝ็ณป็ป| Ubuntu 26.04 ่ๆๆบ็ฎก็็จๅบ| QEMU/KVM ็ฎๆ | Kioptrix Level 1 VMDK ๆปๅปๆบ IP| 192.168.56.1...
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
Azure HDInsight Ambari Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft Azure CLI Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-19650-CVE-2026-19478
cve-id ๆ่ต ้่ฟ PayPal ๆๆซๆไธๆนไบ็ปด็ ๆฅๆฏๆๆฌ้กน็ฎ็็ปดๆคใ โก ็ฎๅ็จๆณ ่ฏทไป ๅจๆฌ้กน็ฎๅฎๅ จไธ็ปๆๆ็็ฏๅขไธญไฝฟ็จ๏ผไพๅฆ๏ผ ๆฌๅฐ่ๆๆบ Docker ๅฎนๅจ ้็ฆป็ๅฎ้ชๅฎค็ฏๅข ็ปๆๆ็ๆธ้ๆต่ฏ็ฏๅข ็คบไพ่ฎพ็ฝฎ๏ผ root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windo...
CVE-2025-10035
CVE-2025-10035 โ Fortra GoAnywhere MFT License Servlet Deserialization RCE Research writeup by Sentinel AI Defense. Defensive analysis only โ no working exploit or PoC is published here. A perfect-10 deserialization chain in Fortra GoAnywhere MFT: a forged license response signature lets an...
CVE-2021-3156
Exploit Chain Deep-Dive: CVE-2021-3156 Baron Samedit Author: IJ Baig Date: July 7, 2026 1. CVE ID, Affected Versions, & Build Confirmation CVE ID: CVE-2021-3156 Vulnerability Type: Heap-Based Buffer Overflow Affected Version Range: Legacy Sudo versions 1.8.2 to 1.8.31p2, and stable versions 1.9.0...
CVE-2025-33073
CVE-2025-33073 โ Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only โ no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated โ letti...
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023. CVE-2026-53246: sctp: validate cached peer INIT chunk length in...
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: CVE-2026-46242: eventpoll: fix epremove struct eventpoll / struct file UAF bsc1270300. CVE-2026-52956: libceph: Fix potential out-of-bounds access in cephxdecrypt...
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213...
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: CVE-2026-46242: eventpoll: fix epremove struct eventpoll / struct file UAF bsc1270300. CVE-2026-46319: net/sched: actct: Only release RCU read lock after ctft...