copy-fail-c

Copy Fail CVE-2026-31431 - C port English en ∙ 日本語 ja ∙ 简体中文 zh-cn ∙ 한국어 ko ∙ Русский ru A cross-platform C reimplementation of the Copy Fail Linux LPE CVE-2026-31431, disclosed 2026-04-29 by Theori / Xint. See the canonical writeup at copy.fail for the full vulnerability description, timeline, a...

CVE-2020-8559

Kubernetes CVE-2020-8559 Exploit Proof of Concept PoC Questo è solo a scopo dimostrativo. Da usare esclusivamente su sistemi su cui sei autorizzato a eseguire azioni amministrative e su cui sei autorizzato a sfruttare CVE-2020-8559. Questa è una PoC per CVE-2020-8559. Questa vulnerabilità consent...

pyFlipper

PyFlipper Wrapper CLI Python per Flipper Zero Articoli Come hackerare un ristorante Funzioni e caratteristiche: Wrapper CLI seriale per Flipper Interfaccia client Websocket Interfaccia TCP semplice Novità compatibilità firmware 1.x Questa release allinea il wrapper alla CLI corrente di Flipper Ze...

CVE-2026-41091-PoC-Exploit

☀️ CVE-2026-41091 - RedSun SolarFlare - Exploit LPE per Microsoft Defender Vulnerabilità di Link Following in Microsoft Defender - Escalation di privilegi locali a NT AUTHORITY\SYSTEM La vulnerabilità è nota come "RedSun" 🎯, "SolarFlare" è il nome che ho dato al mio exploit. ✅ 📌 Panoramica Questo...

CVE-2019-12949

CVE-2019-12949 Von Cross-Site-Scripting-Schwachstelle zu Remote-Code-Ausführung in pfSense 2.4.4-p2 und 2.4.4-p3 Informationsbeschreibung: In pfSense 2.4.4-p2 und 2.4.4-p3 kann ein Angreifer, wenn es möglich ist, den authentifizierten Administrator dazu zu bringen, auf einer Phishing-Seite auf...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 Escalation dei privilegi root di DirtyCow Dirty COW era una vulnerabilità di race condition nel kernel Linux. Questa vulnerabilità risiedeva nelle funzioni del kernel che gestiscono la funzionalità copy-on-write COW dei mapping di memoria e, quando sfruttata, consentiv...

dncil

dncil è una libreria di disassemblaggio del Common Intermediate Language CIL scritta in Python che supporta l'analisi dell'header, delle istruzioni e dei gestori di eccezioni dei metodi gestiti .NET. I dati analizzati vengono esposti tramite un'API orientata agli oggetti per aiutarti a sviluppare...

CVE-2024-45409

Exploit de bypass de autenticação Ruby-SAML / GitLab CVE-2024-45409 Este script explora a CVE-2024-45409, que permite que um atacante não autenticado, com acesso a qualquer documento SAML assinado emitido pelo IDP, forje uma Resposta/Asserção SAML e obtenha acesso como qualquer usuário no GitLab...

DEBIAN-CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

CVE-2026-37236

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

CVE-2026-37236

grpc-gateway v2.28.0 contains an Incorrect Access Control flaw in its ServeMux.ServeHTTP handler. The component processes the X-HTTP-Method-Override header without restricting which HTTP methods are permitted. When a POST request with Content-Type: application/x-www-form-urlencoded carries this h...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: librepo (UTSA-2026-032350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032350 advisory. A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata...

Spring Framework 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 maxPartSize Ignored in PartEventHttpMessageReader

The version of Spring Framework installed on the remote host is 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by a vulnerability: - The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is...

Linux Distros Unpatched Vulnerability : CVE-2026-80706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing...

CVE-2026-38093

file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10 , contains a path traversal (CWE-22) vulnerability in its Android implementation. The openFileStream() method in FileUtils.kt uses the DISPLAY_NAME value returned by ContentResolver.query() directly in file path const...

EUVD-2026-67771

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...