CVE-2026-11551-PoC

CVE-2026-11551 - Privilegio non autenticato in White Label & Branding, Free Login Page Customizer White Label & Branding, Free Login Page Customizer update $wpdb-users, $data, ... ← Line 2515: DOUBLE HASH TERSIMPAN Codice Vulnerabile inc/modules/login-screen/signup-password.php:230...

CVE-2023-25136_POC

CVE-2023-25136 POC POC для уязвимости двойного освобождения памяти Double Free до аутентификации, затрагивающей OpenSSH 9.1–9.2 Необходимые библиотеки Убедитесь, что у вас установлены следующие зависимости: Python 3 очевидно termcolor argparse fabric Вы также можете установить эти библиотеки...

K000163073: curl vulnerability CVE-2026-8925

Security Advisory Description The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice. CVE-2026-8925 Impact There is no impact; F5 products are not affected by this...

bincat

Introduzione Cos'è BinCAT? BinCAT è un toolkit di analisi del codice binario statico , progettato per aiutare i reverse engineer, direttamente da IDA o usando Python per l'automazione. Caratteristiche: analisi dei valori registri e memoria analisi del taint ricostruzione e propagazione dei tipi...

CVE-2026-75019 Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output...

apache_audit_cve-2026-23918

cve-2026-23918 Strumenti di audit difensivo per CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE e quattro CVE correlate divulgate nell'avviso di sicurezza del 4 maggio 2026 della Apache Software Foundation...

CVE-2026-18798

QUIC Server May Trigger Double Free When Processing INITIAL Packet...

CVE-2026-68138

CVE-2026-68138 — Tracking-Site für die Linux-Kernel-net/sched-qdisc-Rate-Table-UAF Quelle für den CVE-2026-68138 -Patch-Status-Tracker: eine Single-Page-Website, die festhält, welche Distributionen einen Fix für den Use-after-free / Double-Free der net/sched-qdisc-Rate-Table im Linux-Kernel...

doublehop

Doublehop Dieses Tool soll dabei helfen, PowerShell Remoting / WinRM zu verwenden, um PowerShell-Befehle auf entfernten Hosts mithilfe der WinRM-Double-Hop-Technik auszuführen. Das Tool setzt voraus, dass Sie Zugriff auf das interne Netzwerk und die CLI haben. Nutzung root@kitploit: doublehop...

CVE-2023-25136

CVE-2023-25136 Analisando a memória quando o sshd 9.1p1 aborta devido a um bug de double free. O pdf tem algumas imagens que estão um tanto borradas. Atualizarei em breve para melhor legibilidade...

CVE-2024-54951

Monica-Gespeicherte-XSS-Schwachstelle CVE-2024-54951 CVE-2024-54951 Ich habe das Entwicklungsteam von Monica am 20.11.2024 per E-Mail kontaktiert. Ich habe sie auch über LinkedIn per Kontaktanfrage und in den folgenden Wochen über andere Plattformen kontaktiert. Veröffentlichung hier, da nach 3...

dalfox

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy. Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickl...

CVE-2026-74629

A flaw was found in the Linux kernel's dibs device handling. A use-after-free UAF vulnerability exists where a dibs device interrupt handler can access dmbclientidarr after it has been freed. Additionally, a double-free vulnerability can occur if dibsdevadd fails during dibslodevprobe, leading to...

voron-crypto

Libreria crypto/protocollo Voron — richiesta di revisione Questo è il nucleo crittografico e di protocollo di messaggistica di un piccolo progetto di messenger E2EE, estratto da solo per una revisione esterna. Non è il prodotto completo — il client Android e la configurazione di deployment sono...

Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

CVE-2021-42013

CVE-2021-42013 Servizio vulnerabile Installazione Diverse opzioni: 1. Container Docker root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd...

Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.11 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

CVE-2026-75899

fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percent-encoded input into a different network destination such...