The vulnerability of the AddTime() function in the routers/api/v1/repo/issue_tracked_time.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the AddTime function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20261002-73-0153

The vulnerability of the Rsync file transfer and synchronization utility is related to errors in processing parameter length settings. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261002-73-0139

The vulnerability in perl-YAML-Syck is related to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

RowHammer-Exploit

RowHammer-Exploit RowHammer Based-Exploitbackdoor syssuid using rowhammer Still needs work... figure why stuff doesn't work properly... Current stage... Denial fails with the following stack trace... UG: unable to handle kernel paging request at 0000000100000000 PGD 8000000006de3067 P4D...

gdcm-security-poc

Результаты GDCM 1-6: пакет воспроизведения Шесть дефектов парсера/кодека в GDCM, воспроизведённых на v3.2.6 как сбои санитайзера или ограниченные проверки распространения. Каждый автоматический триггер имеет почти валидный контроль, который не производит уязвимый сигнал. Результат 1 также включае...

mitigate-copy-fail.yml

В этом репозитории нет README...

Copy-Fail-Exploit-CVE-2026-31431

Copy-Fail-Exploit-CVE-2026-31431 Запуск эксплойта на Python 1. Выполнить напрямую python3 copyfailexp.py Компиляция C-версии 1. Компиляция gcc copyfailexp.c -o copyfail 2. Сделать исполняемым chmod +x copyfail 3. Запуск эксплойта ./copyfail su...

Exploit-CVE-2026-1357

Install dependencies pip3 install pycryptodome requests Basic exploit python3 wpvivi.py http://target.com Custom webshell python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Technical explanation: Null Byte Key: When RSA decryption fails, it...

CVE-2026-34621

Анализ нулевого дня Adobe Acrobat Заметки по обратной разработке и вспомогательные материалы для анализа модели доверия JavaScript в Adobe Acrobat и её связи с заявленным путём эксплуатации нулевого дня с участием привилегированных API Acrobat. Обзор Этот репозиторий содержит технический анализ...

CVE-2026-31431

CVE-2026-31431 Copy Fail Checker Проверяет, уязвим ли хост Linux к CVE-2026-31431, и применяет меры по смягчению. Файлы checkcve202631431.yml — Playbook Ansible для проверки и исправления revertcve202631431.yml — Playbook Ansible для отмены мер по смягчению runcheck.sh — Скрипт для выполнения...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 — Уязвимость обхода функции безопасности Windows Shell Предлагаемое название репозитория: CVE-2026-21510-Windows-Shell-Bypass-Analysis Этот README содержит всесторонний обзор CVE-2026-21510 — критической, активно эксплуатируемой zero-day уязвимости, исправленной Microsoft в рамках...

sanic chunked trailer request smuggling allows hidden second request execution

DescriptionSanic's HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating 0\r\n chunk. Because of that, attacker-controlled bytes left in the connection buffer after the first chunked request can be interpreted as the start of a new HTTP request on the same...

wasm2c-tableflip

wasm2c sandbox escape: guest module runs a shell command on the host Read the blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc sets table-size from the module's declared element count and then ignores the result of calloc. When the allocation fails the table i...

CVE-2026-103489

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...

CVE-2026-103489

In JetBrains YouTrack versions prior to 2026.2.19422 , an HTML injection vulnerability exists within VCS command failure notifications . This flaw allows for the improper neutralization of input during web page generation (CWE-79). While the vulnerability is present, no specific exploit details o...

CVE-2026-103489

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...

CLEANSTART-2024-LL34532 FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics

Security vulnerability affects the ffmpeg4 package. FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics...

CLEANSTART-2024-OD86351 When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by ...

Security vulnerability affects the dnsdist package. When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IX...

SUSE CVE-2026-97912

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

CLEANSTART-2026-KP97729 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the kube-state-metrics-fips package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...