604546 matches found
Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-2147)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2147 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions an...
Amazon Linux 2 : openssl11 (ALAS-2026-3907)
The version of openssl11 installed on the remote host is prior to 1.1.1zi-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3907 advisory. Issue summary: Receiving a DTLS record for a future epoch while a handshakeis in progress causes OpenSSL to buffer far...
Amazon Linux 2 : libtiff (ALAS-2026-3921)
The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3921 advisory. An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local p...
curl: Encoded slash traversal in the IPFS/IPNS URL rewrite escapes the configured gateway namespace
curl 8.22.0's IPFS/IPNS CLI rewrite decodes the user path after its first dot-segment cleanup, then places that decoded path after the configured gateway base and /ipfs/ or /ipns/ namespace. An encoded slash can therefore become a structural separator too late for the first cleanup, and the final...
Exploit for Classic Buffer Overflow in Apache Http_Server
CVE-2026-42536: Apache HTTP Server modxml2enc Heap Overflow...
Exploit for SQL Injection in Drupal
Metasploitable3 — Penetration Test Report Author: Arlen F...
Apache Druid - Remote Code Execution
Apache Druid is susceptible to remote code execution because by default it lacks authorization and authentication. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server. id: CVE-2021-25646 info: name: Apache Druid - Remote Cod...
Palo Alto Expedition - SQL Injection
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...
ForgeRock OpenAM <7.0 - Remote Code Execution
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...
NETGEAR Routers - Remote Code Execution
NETGEAR routers R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly others allow...
the-few-chosen-ctf-2026
The Few Chosen CTF 2026 — Writeups Solutions, exploits, and w...
pingap v0.14.2
pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...
Root-My-Device-Payloads
Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...
sj v2.8.2
sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...
Exploit for CVE-2026-65615
JFrog Artifactory Pre-authenticated RCE Full Attack Chain CVE...
smolvm v1.15.0
smolvm Ship and run software with isolation by default. This is a CLI tool that lets you: 1. Manage and run custom Linux virtual machines locally with: sub-second cold start, cross-platform macOS, Linux, Windows, elastic memory usage. 2. Pack a stateful virtual machine into a single file...
hermes-agent v2026.9.11
Hermes Agent ☤ Hermes Agent | Hermes Desktop The self-improving AI agent built byNous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a...