Detection-Rules

APT29 Detection Engineering Production-ready Sigma detection rules developed from analysis of 196,071 Sysmon events in the MITRE ATT&CK Evaluations APT29 dataset. Overview This repository contains validated detection rules for adversary behaviors observed during APT29 simulation. Each rule was...

perwendel__spark_CVE-2016-9177_2-5-1

Spark - a tiny web framework for Java 8 Spark 2.9.4 is out!! com.sparkjava spark-core 2.9.4 Sponsor the project here https://github.com/sponsors/perwendel For documentation please go to: http://sparkjava.com/documentation For usage questions, please use stack overflow with the “spark-java” tag...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 A small explanation of an Apache path traversal bug and an incomplete fix Task 1: A Bit of Background... A Brief History On the 5th of October 2021, a CVE detailing a path traversal attack on Apache...

CVE-2025-56605

CVE-2025-56605 XSS Cross-Site Scripting Vulnerability CVE-2025-56605 — Reflected XSS in Event Management System 1.0 Description: A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC/event-management 1.0. The mobile POST parameter is improperly validated and...

CVE-2025-5777

. PoC POST /p/u/doAuthentication.do HTTP/1.1 Host: 167.xxx.xx.x Content-Length: 5 login . The tool verfiy then 20 more requests to exploit. . Usage:- python CVE‑2025‑5777.py python CVE‑2025‑5777.py -l test.txt...

wp2shell

wp2shell-check Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 "wp2shell", a pre-authentication RCE chain in WordPress core REST API batch-route confusion → SQL injection → RCE. Affected: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 beta full RCE chain; 6.8.0–6.8.5 SQL injection only,...

CVE-2026-48095

CVE-2026-48095 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers to cause arbitrary code execution or...

CVE-2026-55579

CVE-2026-55579 — Pheditor Contraseña Predeterminada Hardcodeada RCE -critical TL;DR: Pheditor todas las versiones se distribuye con una contraseña de administrador predeterminada hardcodeada admin incrustada en su código fuente. No se fuerza el cambio de contraseña en el primer inicio de sesión,...

CopyFail

Escalada de privilegios local / Escape de contenedor CVE-2026-31431 Uso: go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail Versiones afectadas: Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42 Alibaba...

React2Shell

React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next.js/React Server Components RCE. Repository Structure React2Shell/ ├── browser-extension/ Chrome extension for browser-based detection │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └── background.js ├── cli/ Command-line...

CVE-2026-57829

Helix Ultimate Framework — XSS Almacenado No Autenticado comajax → Session-Riding de Admin → Toma Completa de Cuenta Este es el hallazgo más fuerte en esta carpeta de investigación — CRÍTICO, completamente confirmado de principio a fin. A diferencia del error solo de eliminación en...

CVE-2023-49968

CVE-2023-49968 Customer Support System 1.0 - SQL Injection Vulnerability in managedepartment.php via "id" URL Parameter Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. An attacker with malicious intent can execute SQL commands on the MySQL database ...

CVE-2025-4664

🔒 Vulnerabilidad CVE-2025-4664 La vulnerabilidad CVE-2025-4664 es un fallo de seguridad de alta gravedad identificado en el componente Loader de Google Chrome, presente en versiones anteriores a la 136.0.7103.113. Este problema permite a un atacante remoto filtrar datos de origen cruzado mediante...

CVE-2026-102292

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The...

CVE-2026-43499_OPPO-MT6835

CyberMeowfia — GhostLock CVE-2026-43499 Research GhostLock : Linux Kernel futex PI Use-After-Free vulnerability, CVE-2026-43499. Attackers exploit PI-futex dependency loops to trigger a race condition, achieving local privilege escalation on kernels with CONFIGFUTEXPI=y. Target : OPPO PLS120 OP5E...

CVE-2026-27475

CVE-2026-27475 CVSS-B 9.2 CRITICAL Authenticated Insecure Deserialization in SPIP 4.4.8 Explanations and more on my website RCE Gadget Attacker plugins/rcegadget/rcegadgetoptions.php DEBUG:\n"; echo "File: "; vardump$this-file; echo "Data: "; vardump$this-data; echo ""; fileputcontents$this-file,...

RLSA-2026:72448 Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: Expat: Denial of Service via quadratic complexity in attribute processing CVE-2026-66046 expat: Expat: XML Injection via Malformed UTF-16 Input CVE-2026-93990 For more details about the security issues, including the impact, a...

expat security update

An update is available for expat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: expat: Expat:...

Toptech TMS7 and TopHAT

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access critical data or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

Anjvision YSSD-RTMP-H5

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the...