CVE-2026-90852 luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

CVE-2026-90852

luben zstd-jni (a Java binding for the Zstandard compression library) is affected by a use-after-free vulnerability in the Dictionary Sharing component, specifically in the function ZstdCompressCtx.loadDict within ZstdCompressCtx.java. Affected versions are up to 1.5.7-13 . The vulnerability can ...

container-escape-ebpf

白皮书 https://www.scs-europe.net/dlib/2026/2026-0321.html 假设 主机运行存在漏洞的 runc 版本： 对于 CVE-2025-31133：1.2.7 及以下版本、1.3.0-rc.1 至 1.3.2、1.4.0-rc.1 及 1.4.0-rc.2。 对于 CVE-2024-21626：1.0.0-rc93 至 1.1.11。 非特权用户能够使用 runc（或 containerd 的 ctr）通过 OCI 配置文件及纯 rootfs 创建容器。 用法 root@kitploit:...

CVE-2026-56291

CVE-2026-56291 — Balbooa Forms Joomla 大规模 RCE 利用 无需认证的 form.uploadAttachmentFile → 无 CSRF → PHP 上传 概述 CVE-2026-56291 是 Balbooa Forms combaforms Joomla 扩展 CISA KEV： 添加于 2026 年 7 月 10 日 —— 已确认被积极利用。 漏洞机制 根因 root@kitploit: // FormModel::uploadAttachmentFile frontend/models/forms/FormModel.php L122 /...

EUVD-2026-78253

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-90851 PHPGurukul Hostel Management System checklogin.php access control

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-90851

PHPGurukul Hostel Management System 3.0 contains an improper access control flaw in the file /admin/includes/checklogin.php . Manipulation of the ID argument allows a remote, low-privileged attacker (no user interaction required) to bypass access controls. The CVSS 3.1 score is 6.3 (MEDIUM) with ...

CVE-2026-90851 PHPGurukul Hostel Management System checklogin.php access control

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2025-70829

CVE-2025-70829：Datart 信息泄露漏洞 1. 漏洞概述 CVE ID : CVE-2025-70829 影响产品 : Datart 版本 : v1.0.0-rc.3 漏洞类型 : 信息泄露 Information Exposure Datart v1.0.0-rc.3 存在信息泄露漏洞，允许经过身份验证的攻击者通过自定义 H2 JDBC 连接字符串访问敏感数据。通过引导应用程序连接到自身的内部数据库文件，攻击者可以查询包含用户凭据和配置详情的系统表。 2. 复现步骤 前置条件 已拥有登录 Datart 仪表板的权限。 操作步骤 1. 登录 到 Datart 系统...

CVE-2026-91771

A flaw was found in Weights & Biases wandb. This vulnerability allows attackers controlling the backend to supply file names with directory traversal sequences during file download operations. This can lead to writing files outside the intended download directory, potentially enabling arbitrary...

CVE-2026-57830

Helix Ultimate Framework — 未经身份验证的路径遍历导致任意文件/文件夹读取+删除 这是一个已确认的拒绝服务 + 跨租户文件系统访问漏洞，并非远程代码执行。 关于远程代码执行升级的理论（删除 configuration.php 以重新暴露 Joomla 安装程序）已通过实际测试并被推翻——详见下文“远程代码执行升级——已测试并推翻”。在任何报告中，未经重新构建真实攻击链之前，不得将其描述为远程代码执行漏洞。 严重性升级（2026-07-06，第二轮评估）： path 参数并未如最初评估的那样被安全限制在 Joomla 的 Web 根目录内——Joomla 的 PA...

EUVD-2026-78252

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-90850 PHPGurukul Hostel Management System manage-students.php cross site scripting

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-90850 PHPGurukul Hostel Management System manage-students.php cross site scripting

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-90850

CVE-2026-90850 affects PHPGurukul Hostel Management System 3.0 , specifically an unspecified function in the file /admin/manage-students.php . The vulnerability enables cross-site scripting (XSS) via remote manipulation. Exploitation requires high privileges (authenticated admin-level access) and...

CVE-2025-69212-PoC

CVE-2025-69212 — OpenSTAManager P7M Command Injection PoC OpenSTAManager = 2.9.8 — OS Command Injection via malicious .p7m filename in ZIP upload. File: src/Util/XML.php:100 — unsanitized $file in exec Vector: /plugins/importFEZIP/actions.php → ZIP → .p7m filename → exec"openssl smime ... -in...

CVE-2025-55182-POC

CVE-2025-55182 – 命令注入漏洞扫描器 包含真实命令输出的完整概念验证 此仓库包含一个基于 Python 的概念验证 PoC 扫描器，用于 CVE-2025-55182，演示攻击者如何通过基于 JSON 的 POST 请求利用命令注入漏洞。 该工具允许安全研究人员和渗透测试人员通过发送命令并获取其执行输出来验证目标是否存在漏洞。 ⚠️ 免责声明 本项目仅用于教育、研究和授权的渗透测试目的 。 您全权负责遵守所有适用法律。 请勿将本工具用于您不拥有或未获得明确测试许可的系统。 作者对任何滥用或造成的损害不承担任何责任 。 DORK SHODAN:...

CVE-2022-24693

CVE-2022-24693 描述 固件版本为 QRTB 2.7.8 及更早版本的 Baicells Nova436Q 和 Neutrino 430 设备具有容易被发现的硬编码凭据，远程攻击者可通过 ssh 使用这些凭据进行身份验证。（这些凭据存储在固件中，由 crypt 函数加密。） CVSS 分数 CVSS 9.8 漏洞类型 CWE-284: 不当访问控制 产品厂商 BaiCells 受影响产品代码库 NOVA436Q - QRTB 2.7.8（可能所有 2.9.x 之前的版本） NEUTRINO430 - QRTB 2.7.8（可能所有 2.9.x 之前的版本） 受影响组件...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

warpgate v0.29.0-beta.1

Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...