3681 matches found
certbot
.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...
CVE-2021-41773
CVE-2021-41773 Poc CVE-2021-41773 - Apache 2.4.49 with CGI enabled Usage : chmod -x CVE-2021-41773.sh ./CVE-2021-41773.sh http://ip:port/ /etc/passwd References https://nvd.nist.gov/vuln/detail/CVE-2021-41773 https://vulners.com/cve/CVE-2021-41773...
dvwassl
SSL-enabled Damn Vulnerable Web App Run an SSL-enabled Damn Vulnerable Web App. Why? You might want to test web attack detections over SSL. Build the image docker build -t dvwassl:latest . Run the container docker run -d -p 443:443 dvwassl:latest Custom SSL certificate and key The image comes wit...
tester-linux-cve-2026-98432
This is a test program for Linux-kernel CVE-2026-98432. Aim it at a box to see whether IP-option-enabled SYN packets are responded to or blackholed. I haven't got RecordRoute mode to make sense yet but MptcpBare and MptcpKeys worked well to test my infrastructure before and after mitigation...
Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the...
CVE-2017-7529-POC
CVE-2017-7529-POC Vulnerability Impact This vulnerability affects all Nginx default configuration modules from version 0.5.6 to 1.13.2. An attacker only needs to enable caching to send malicious requests for remote attacks, causing information disclosure. When the Nginx server uses a proxy cache,...
halo-cors-csrf-CVE-2026-67921
CVE-2026-67921: Halo CMS CORS Misconfiguration + CSRF Protection Bypass Combined Attack Summary A critical combined attack vulnerability exists in Halo CMS versions up to 2.25.4 due to two security misconfigurations: 1. CORS Misconfiguration : The CORS policy allows any origin with credentials:...
CVE-2018-6789
CVE-2018-6789 Environment Setup Install dependencies apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev Download an old version of exim wget ftp://mirror.easyname.at/exim-ftp/exim/exim4/old/exim-4.89.tar.gz tar -xvzf ./exim-4.89.tar.gz c...
CVE-2024-21338
CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...
CVE-2021-41773
ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...
Linux Distros Unpatched Vulnerability : CVE-2026-125256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative...
CVE-2026-121370 Security Advisory 0224
On affected platforms running Arista EOS with Precision Time Protocol PTP configured, an unauthenticated attacker with network access to a PTP-enabled port can create a denial of service DoS condition by sending traffic to the system...
CVE-2026-109808
The SAP Solution Tools Plug-In (ST-PI) is vulnerable to a missing authorization check in certain remote-enabled functionality. An authenticated attacker who possesses prior knowledge of specific internal identifiers can exploit this flaw to access restricted data. This vulnerability results in a ...
CVE-2026-109808: SAP_SE SAP Solution Tools Plug-In (ST-PI): Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an…
Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an authenticated attacker to invoke this functionality to access data that would otherwise be restricted. Exploitation is only possible under certain conditions, as the attacker must ha...
UBUNTU-CVE-2026-125256
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...
CVE-2026-125256
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...
EUVD-2026-120206
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...
PT-2026-141084
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff llvidenc diff bytes rvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on...
CVE-2026-125256: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_llvidenc_diff_bytes_rvv() that allows…
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...
DEBIAN-CVE-2026-121960
FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPRASSERT and abort the server...