ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.12 Vulnerability Details CVEID:CVE-2026-2303 DESCRIPTION: The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap...

DataEase-Authenticated-SQL-Injection-

DataEase: Authenticated SQL Injection previewData Summar...

K000163234: BIND vulnerability CVE-2026-11331

Security Advisory Description An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may...

memdumper

memdumper memdumper reads the memory of a running macOS process under another signed binary's debugger entitlement. The aim is that taskforpid and ptrace run as that entitled binary, so an EDR records it rather than memdumper. by cenobyte [email protected] 2026...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 have been addressed in version 11.3.1.2-IF2 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to...

RedTeamScripts

RedTeamScripts Repository with various Red Team scripts. kill.exe Performing all kind of activities during a red team and you have several process running that you don't want to close manually. kill.exe is for you. copy it in C:\Windows\ and simply call it with the process name you want to kill...

CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Escalada Local de Privilegios en Linux Una demostración y explicación de CVE-2026-31431, la vulnerabilidad de escalada local de privilegios por Copy Fail en el kernel de Linux. La vulnerabilidad permite que, en archivos abiertos con permiso de lectura, se sobrescriban dato...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 2.0) is affected by multiple vulnerabilities in various components

Summary IBM Cloud Pak for Data System 2.0 includes several open-source, third-party, and containerized components as part of its software stack and system environment. Multiple security vulnerabilities have been identified across various components and libraries, including PLY, pyOpenSSL,...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 2.0 have been addressed in version 11.3.1.3-IF4 Vulnerability Details CVEID:CVE-2026-59889 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

mks-copy-fail-mitigation

Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...

SUSE-SU-2026:23506-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277949. -...

OPENSUSE-SU-2026:21809-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277949. -...

CVE-2025-47962-POC

CVE-2025-47962-POC Reproduction process： i686-w64-mingw32-gcc -shared -o CRYPTBASE.dll poc.c -lkernel32 copy CRYPTBASE.dll "C:\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\CRYPTBASE.dll" net stop IpOverUsbSvc net start IpOverUsbSvc Explanation： IpOverUsbSvc root@kitploit: sc.exe qc IpOverUsbSvc...

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user's question as usual. In the company's proof of concept, that hidden work read data from the user's connect...

CVE-2026-11784-Optimole-CSRF

CVE-2026-11784: CSRF to Arbitrary File Overwrite in Optimole WordPress Plugin Summary A Cross-Site Request Forgery CSRF vulnerability in the Optimole plugin for WordPress versions = 4.2.5 allows unauthenticated attackers to silently overwrite existing media library assets via the...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

Volume Shadow Copy Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

CVE-2021-3156

Exploit Chain Deep-Dive: CVE-2021-3156 Baron Samedit Author: IJ Baig Date: July 7, 2026 1. CVE ID, Affected Versions, & Build Confirmation CVE ID: CVE-2021-3156 Vulnerability Type: Heap-Based Buffer Overflow Affected Version Range: Legacy Sudo versions 1.8.2 to 1.8.31p2, and stable versions 1.9.0...