USN-8751-1: Urwid vulnerabilities

Katriel Moses discovered that Urwid used a weak PRNG. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

USN-8751-1 urwid vulnerabilities

Katriel Moses discovered that Urwid used a weak PRNG. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

ai-tool-poisoning-guard

ai-tool-poisoning-guard 适用于 Claude Code、Codex 和 Cursor 的最低安全基线规则。这条免费规则弥补了各工具内置审查中的真实缺口。完整规则集 + 实施指南：Gumroad 链接 — 即将推出 。 你的 AI 编程助手会审查代码。但它不会审查随工具一起出现的那句话。 Claude Code、Codex 和 Cursor 都内置了某种形式的安全审查。但默认情况下，它们都不会将 MCP 工具描述 ——纯自然语言文本——视为需要与代码同等审查力度的输入面。 缺口所在： 当你添加一个 MCP...

USN-8750-1 ffmpeg vulnerabilities

Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service. CVE-2026-12706 Xinghang Lv discovered that FFmpeg did not correctly handle certa...

USN-8750-1: FFmpeg vulnerabilities

Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service. CVE-2026-12706 Xinghang Lv discovered that FFmpeg did not correctly handle certa...

aurora-demo-lockfile

aurora-demo-lockfile Demo target for AURORA — the UiPath for Coding Agents challenge submission at mlbrilliance/uipath-for-coding-agents. This repo intentionally contains three vulnerable lockfiles so AURORA's Maestro process OssSupplyChainDefender has something to detect, triage, and remediate. ...

zelos

Zelos Zelos（Z eropoint E mulated L ightweight O perating S ystem）は、Pythonベースのバイナリエミュレーションプラットフォームです。Zelosの用途の1つは、コマンドラインやPythonスクリプトを使用して、バイナリの動的な挙動を迅速に評価することです。すべてのシステムコールはエミュレートされ、ターゲットのバイナリを隔離します。サポートされているアーキテクチャは、Linux x8664（32ビットおよび64ビット）、ARM、MIPSです。UnicornがCPUエミュレーションを提供します。...

CVE-2019-9978

CVE-2019-9978 – Proof of Concept PoC PoC funcional para la vulnerabilidad CVE-2019-9978 , que afecta al plugin Social Warfare = 3.5.2, permitiendo Remote Code Execution RCE en WordPress. 📌 Descripción Este exploit abusa del parámetro swpdebug=loadoptions para forzar la carga de un payload remoto,...

CVE-2024-44541

CVE-2024-44541: Vulnerabilidad de Inyección SQL en Inventio Lite v4 Descripción Inventio Lite v4 es vulnerable a Inyección SQL SQLi en el endpoint /action=processlogin. Esta vulnerabilidad permite a los atacantes inyectar consultas SQL arbitrarias a través del parámetro username en solicitudes...

CVE-2026-90619

A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...

CVE-2026-33966

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive Information Into Debugging Code...

Solar-exploiting-log-4j

🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...

Erlang-OTP-PoC_CVE-2025-32433

Erlang/OTP SSH Pre-Authentication Channel Confusion 📺 Proof of Concept Video Description: A demonstration of the Erlang/OTP SSH Pre-Authentication Channel Confusion vulnerability. Click here to watch the full demo on YouTube Abstract What is this PoC about? This Proof of Concept demonstrates...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd Critical Stack-Based Buffer Overflow in OpenWrt odhcpd A remote unauthenticated stack-based buffer overflow allowing potentialRemote Code Execution RCE with root privileges. 📖 Overview ⚡ Description CVE-2026-53921 is a critical stack-based buffer overflow affecting the...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Cadena de explotación de prueba de concepto que he descubierto y que ha sido asignada como CVE-2026-47301 para Microsoft Configuration Manager SCCM, combinando control de acceso roto, escritura arbitraria de archivos mediante salto de ruta de...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — Unauthenticated SQLi to Root RCE Severity: Critical Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module Tested On: FreePBX on CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Overview An unauthenticated SQL injection...

React2Shell-CVE-2025-55182

CVE-2025-55182 — React2Shell Unauthenticated RCE in React Server Components via insecure deserialization of the Flight protocol. A single HTTP request is enough to execute arbitrary code on the server — no credentials, no prior access needed. root@kitploit: / / / /| |/ / \ / / / / / / / / // / /...

CVE-2014-4113

CVE-2014-4113 Trigger and exploit code for CVE-2014-4113...

cacti-cve-2023-39361

Cacti ™ Running Cacti from the develop Branch IMPORTANT When using source or by downloading the code directly from the repository, it is important to run the database upgrade script if you experience any errors referring to missing tables or columns in the database...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability: Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...