GHSA-8CP2-47HG-MFGH Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

GHSA-2J8R-3C22-8565 Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

GHSA-527H-Q9F6-P7QX Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

GHSA-63GH-G2X5-X69V Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Microsoft Outlook Moniker Link 漏洞 概述 本仓库记录了我对 CVE-2024-21413 Moniker Link 的动手分析，这是一个严重的 Microsoft Outlook 漏洞，可绕过受保护视图（Protected View），通过 SMB 认证泄露 Windows NetNTLMv2 凭据。 严重性： 严重 CVSS 9.8 学习目标 了解 Moniker Links 学习 Outlook 受保护视图的工作原理 分析 CVE-2024-21413 捕获 NTLM 凭据 检测恶意电子邮件 应用缓解策略 漏洞详情 字...

OpenNebula-CVE-2025-56536

OpenNebula-CVE-2025-56536 漏洞标题： OpenNebula 6.10.0.1 - 用户信息中的存储型 XSS（跨站脚本） 漏洞作者： Mark Artamonov 厂商主页： https://opennebula.io/ 测试版本： OpenNebula 6.10.0.1 受影响版本： OpenNebula 概念验证： 修复： 升级至 OpenNebula =7.0。...

CVE-2023-27372

研究项目：CVE-2023-27372 —— SPIP（RCE，实验室靶场 + Safe PoC） 1 简介 本仓库包含： stand/ —— 基于 Docker 的实验室靶场（漏洞环境）：SPIP + MariaDB。 poc/ —— 基于 Python 的检查工具（扫描器），实现漏洞的安全确认 （Safe PoC），不含破坏性操作。 本项目用于演示和分析 CVE-2023-27372 漏洞，该漏洞影响 SPIP 4.2.1 及更早版本 。检测通过密码恢复功能（endpoint spip.php?page=spippass）进行，并通过在靶场端执行安全命令来确认。 2 仓库结构...

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285：一包即杀死OpenBSD上的IPv6 来自本地网络的一个精心构造的ICMPv6数据包会永久挂起slaacd和/或rad。IPv6 SLAAC地址自动配置将失效，直到有人手动重启守护进程。无需认证，无需权限，只需18字节的ICMPv6负载。 | ---|--- CVE| CVE-2026-41285 漏洞类别| 整数下溢导致的无限循环 根本原因| ND选项解析器执行ndoptlen 8 - 2时未检查len==0 受影响组件| sbin/slaacd/engine.c，usr.sbin/rad/engine.c 影响| IPv6...

CVE-2026-67401

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component...

CVE-2026-67401

A SQL injection vulnerability in cPanel's EmailTrack component allows a mail-enabled hosting account to achieve remote code execution as root . Affected versions include 11.110, 11.134, 11.136, 11.138 , and WP Squared 11.138.1.9 , or any build below the patched version. The CVSS score is 9.9 (Cri...

EUVD-2026-75062

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component...

CVE-2026-67401

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component...

CVE-2021-3560-exploit

CVE-2021-3560 — Polkit 权限提升 CVE-2021-3560 是 Polkit （前身为 PolicyKit）中的一个本地权限提升漏洞，Polkit 是 Linux 桌面环境使用的授权框架。本地非特权攻击者可以利用 accounts-daemon D-Bus 接口中的竞态条件创建特权用户、设置其密码，并最终获得 root 访问权限。 工作原理 背景：Polkit + accounts-daemon accounts-daemon（org.freedesktop.Accounts）是一个系统 D-Bus 服务，负责管理用户帐户（创建、删除、密码更改等）。它暴露了以下方...

CVE-2021-4773

CVE-2021-4773 这是如何利用虚拟机中的CVE-2021-4773漏洞的练习示例 本教程需要以下内容 kali Linux虚拟机 Ubuntu Server虚拟机 安装Apache 2.4.49版本 那么让我们开始 当你有2个虚拟机在运行时，你需要通过归档仓库安装Apache 2.4.49版本 你可以在这里找到该版本： https://archive.apache.org/dist/httpd/CHANGES2.4.49 在Ubuntu Server中安装并配置存在漏洞的版本 1 第一次在你的服务器虚拟机上，需要运行以下命令 root@kitploit: curl -k -L ...

CVE-2026-31431

CVE-2026-31431 漏洞简介 CVE ID：CVE-2026-31431 绰号：Copy Fail 危害等级：高危（CVSS v3 评分 7.8） 漏洞类型：本地权限提升（LPE） 影响组件：Linux 内核的 algifaead模块（AFALG 加密接口） 利用前提：攻击者只需在目标系统上拥有一个普通用户的执行权限（甚至是在受限容器中），无需任何特殊 Capabilities 或用户交互。 影响范围 红帽系：Red Hat Enterprise Linux 8/9/10, CentOS, AlmaLinux, Rocky Linux 等 Debian 系：Ubuntu...

Nexora

Nexora Nexora is an AI-driven enterprise endpoint governance and security intelligence system that monitors software usage across machines, applies policy-based risk classification, and generates structured behavioral and security reports. It is designed for environments where organizations need...