CVE-2026-77358 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

EUVD-2026-67302

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2025-50110

CVE-2025-50110 Trasmissione in chiaro di informazioni sensibili nell'applicazione Android EagleEyes Lite 1. Panoramica Nome : EagleEyesLite Versione : 2.0.0 Fornitore : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query...

pbck-exploit

Framework di Sfruttamento di Massa & Validazione per Joomla Page Builder CK Caricamento Arbitrario di File Non Autenticato → Esecuzione di Codice Remota 📑 Indice dei Contenuti Panoramica della Vulnerabilità Versioni Affette Funzionalità Installazione Utilizzo Prova di Concetto Approfondimento...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — PFEM10 CVE-2026-43499 IonStack exploit for OP...

CVE-2025-48827

CVE-2025-48827 - Exploit di Bypass dell'Autenticazione di vBulletin Panoramica Questo repository contiene un exploit proof-of-concept per CVE-2025-48827, una vulnerabilità critica di bypass dell'autenticazione che colpisce vBulletin 5.0.0–5.7.5 e 6.0.0–6.0.3 quando eseguito su PHP 8.1 o successiv...

mks-copy-fail-mitigation

DaemonSet per mitigazione Copy Fail DaemonSet per correggere le vulnerabilità della famiglia Copy Fail su tutti i worker node dei cluster MKS. Contenuto CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Descrizione della vulnerabilità ID CVE:...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

CVE-2026-36213

CVE-2026-36213 CVE-2026-36213 | Escalada de Privilégio Local no MEmu Android Emulator 9.2.7.0 via Permissões Inseguras de Binário de Serviço | Corrigido na versão 9.3.2 CVE-2026-36213 — MEmu Android Emulator 9.2.7.0 LPE Resumo Uma vulnerabilidade de Escalada de Privilégio Local LPE no MEmu Androi...

fastjson-tp1fn1

json.org CVE-2022-45688 True- und False-Positive WTF ?? Das Projekt enthält eine fastjson-Abhängigkeit mit CVE-2022-25845. Die Schwachstelle tritt auf, da Markup in JSON als Java-Beans interpretiert wird, d. h. Klassen werden instanziiert und Eigenschaften werden durch das Ausführen von...

CVE-2026-76179 Ebyte NE2-D11 Use of GET Request Method With Sensitive Query Strings

An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insufficiently protected during client-side session handling, which may allow an attacker with access to exposed session informati...

CVE-2026-76179 Ebyte NE2-D11 Use of GET Request Method With Sensitive Query Strings

An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insufficiently protected during client-side session handling, which may allow an attacker with access to exposed session informati...

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 Ein kleines, abhängigkeitsarmes Bash-Skript, das Ihnen mitteilt, ob Ihr Linux-System der Copy Fail -Schwachstelle zur lokalen Rechteausweitung CVE-2026-31431 ausgesetzt ist. Das Skript ist schreibgeschützt : Es nutzt den Fehler nie aus, lädt nie Kernel-Module un...

dotnetpaddingoracle

dotnetpaddingoracle Piccolo script per verificare se l'applicazione web .NET è vulnerabile al padding Oracle Questo script verifica effettivamente se l'oracolo è presente e sfruttabile, non solo se la patch è stata installata. Uso root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER...

DetectWindowsCopyOnWriteForAPI

Strumenti di Enumerazione delle Proprietà dei Processi Windows per la Caccia alle Minacce ====================== Sfondo Lo scopo di questi strumenti è enumerare le caratteristiche dei processi Windows che supportano il rilevamento delle tecniche di process injection utilizzate dagli attori delle...

CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6: CSRF zu Privilegieneskalation Inhaltsverzeichnis Übersicht Details zur Schwachstelle Betroffene Software CVSS-Score Angriffsszenario Proof of Concept PoC Schritte zum Reproduzieren Auswirkungen Behebung Referenzen Haftungsausschluss Übersicht CVE-2023-34839 i...

WindowsMemPageDelta

Windows-Delta-Reporter für ausführbare Speicherseiten Ein Windows-Dienst, der alle 30 Sekunden performant Telemetrie über neue oder geänderte Windows-Speicherseiten erzeugt, die jetzt ausführbar sind. Von NCC Group Plc als Open Source veröffentlicht - http://www.nccgroup.com/ Entwickelt von Ollie...

WindowsFirewallHookDriverEnumeration

Enumeração do Driver de Hook do Firewall do Windows Ferramentas para enumerar drivers de hook do firewall do Windows no Windows 2000, XP e 2003. Vimos uma amostra de código malicioso que usa essa técnica. A Técnica de Hooking A funcionalidade de Hook do Firewall do Windows na técnica XP/2003 1234...

zipdefrag

Dieser Dump ist ein Puzzle oder fortgeschrittenes Shotgun-Parsing für Narren und Rebellen Es war einmal Es war einmal, liebe Leserin, lieber Leser, in einer dunklen und stürmischen Nacht: Dein treuer Autor stieß auf eine verwirrende und geheimnisvolle Situation – ein System, in dem das Einzige, w...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059, CVE-2026-47010, CVE-2026-16439, CVE-2026-16441, CVE-2026-1624...