cve-2022-33891-fix

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 2023 Tópico: CVE-2022-33891 Execução de comandos shell arbitrários em aplicação spark que utiliza autenticação via ACL Alunos Elinilson Vital Leoarndo Bozzetto CVE-2022-33891 Patch Instructions for Ubuntu 22.04 Prerequisites Ubuntu 22.04...

PHP2SHELL

!php2shell — behavioural detection and exploit chainassets/ba...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Denial-of-service via unbounded recursion in TanStack Query'sreplaceEqualDeep function A single crafted query update with deeply nested objects can freeze the JavaScript thread indefinitely , causing complete application unresponsiveness. No authentication or special permission...

BIDO

BIDO This code belongs to "BIDO: A Unified Approach to Address Obfuscation and Concept Drift Challenges in Image-based Malware Detection". Author Author: Junhui Li1, Chengbin Feng2, Zhiwei Yang1, Qi Mo1 and Wei Wang1. Institution Institution1：Software School, Yunnan University, Kunming, Yunnan...

CVE-2026-27621

CVE-2026-27621: TypiCMS Core has Stored Cross-Site Scripting XSS via SVG File Upload Overview Field| Details ---|--- CVE ID| CVE-2026-27621 Severity| MEDIUM Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products typicms/core versions: 16.1.7 CWE Classification CWE-79: Improper...

apex-kev-change-desk

Apex KEV Change Desk An offline change-review prototype for IT teams comparing two CISA Known Exploited Vulnerabilities KEV JSON snapshots. It reports added, removed and edited records, including exact before/after values for every changed field. It is a data-review utility, not a security...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 Vulnerability Tester Automated security testing tool for CVE-2023-33177 - Zip Slip Path Traversal vulnerability in Xibo CMS that leads to Remote Code Execution RCE. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Only use on systems you own...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

EUVD-2026-108280

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613

The msgpack-python C extension (msgpack._cmsgpack) contains an unbounded memory leak in versions prior to 1.2.3 . When deserializing data with strict_map_key=True (the default), the extension fails to release decoded map values upon key validation failure. This vulnerability affects both unpackb(...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2025-66249-POC

CVE-2025-66249 — Apache Livy Path Traversal Whitelist Bypass For educational and security research purposes only. Do not use against systems you do not own or have explicit written permission to test. →Full Disclaimer Overview Field| Detail ---|--- CVE ID| CVE-2025-66249 Severity| Important CVSS...

CVE-2025-61301

CVE-2025-61301 - CAPEv2: Denial-Of-Analysis via Recursive Process Forking Description A High-Severity Denial-of-analysis vulnerability affects reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or...

CVE-2026-23491

CVE-2026-23491: InvoicePlane has Unauthenticated Path Traversal in Guest Controller Overview Field| Details ---|--- CVE ID| CVE-2026-23491 Severity| CRITICAL Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products InvoicePlane/InvoicePlane Details Summary A path traversal...

dns-benchmark-tool

⚠️ this project has moved and is no longer maintained. install the successor: pip install net-benchmark repository: https://github.com/net-benchmark/net-benchmark all existing commands and flags remain fully compatible. DNS Benchmark Tool Part of BuildTools - Network Performance Suite Fast,...

CVE-2026-54532

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pullrequesttarget workflow is vulnerable to cache poisoning and OIDC token theft. A pullrequesttarget workflow checks out fork code using github.event.pullrequest.head.sha or .head.ref. This gives...

CVE-2026-114610

fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.buildxref passes nested SVG references to GraphicsContext.additem, whose default clone=True deep-copy behavior copies the complete referenced graphics tree during FPDF.image processing. Repeating references at...

CVE-2026-114609

fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTPS URLs and raw local paths supplied through FPDF.image, FPDF.writehtml HTML values, SVG or xlink:href values, and template image fields. This can cause outbou...