CVE-2022-37969

CVE-2022-37969...

CVE-2024-3273-

CVE-2024-3273-...

CVE-2026-81826 Flowintel Fails to Invalidate Active Sessions After Password Change

Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...

CVE-2026-5218

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

CVE-2026-81818 Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges

Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from editing a full administrator within the...

CVE-2026-81818

Flowintel (versions ≥3.3.0) contains an authorization flaw in the administrative user-edit API . The existing check prevented an organization administrator from editing users in another organization but did not block editing a full administrator within the same organization. This allowed an org a...

CVE-2026-81818 Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges

Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from editing a full administrator within the...

EUVD-2026-67125

Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from editing a full administrator within the...

CVE-2026-12802

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to compromise the integrity of data during the decryption of Cryptographic Message Syntax CMS AuthEnvelopedData. The software fails to properly enforce the tag-length, which could enable an attacker to...

CVE-2026-81668

A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Conte...

CVE-2026-31431-copy-fail

Copy Fail A maioria dos LPEs Linux precisa de uma janela de corrida ou de um offset específico do kernel. Copy Fail é uma falha lógica de linha reta — não precisa de nenhum dos dois. O mesmo script Python de 732 bytes dá root em todas as distribuições Linux lançadas desde 2017. Execução rápida:...

copy-fail-cve-2026-31431

Copy Fail - CVE-2026-31431 Questo repository fornisce una porta Go del PoC pubblico di Copy Fail e una pipeline di build riproducibile per binari Linux multi-architettura. Copy Fail CVE-2026-31431 è un difetto logico del kernel Linux in authencesn che consente una scrittura deterministica di 4 by...

CVE-2026-31431-PoC

Copy Fail - Python 3.9 PoC CVE-2026-31431 Der öffentliche Copy-Fail-Exploit war nicht mit Python 3.9 kompatibel, dieser hier schon. Das Original wurde modifiziert, indem das nicht verfügbare os.splice durch einen schlanken ctypes-Polyfill ersetzt wurde. 🚨 RECHTLICHER HAFTUNGSAUSSCHLUSS CFAA &...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 byte. Qualsiasi distro. Root. Un difetto logico lineare nel template crittografico authencesn del kernel Linux consente a un utente locale non privilegiato di eseguire una scrittura precisa e controllata di 4 byte nella page cache di qualsiasi file leggibile — inclu...

CVE-2026-19223

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

cve-2026-32746-mitigation

CVE-2026-32746: Strumento Avanzato di Mitigazione per il Networking Linux 🚨 DISCLAIMER TECNICO CVE-2026-32746 è una vulnerabilità ipotetica utilizzata per dimostrazioni educative. Questo strumento affronta lo scenario della "Tempesta Perfetta": un demone Telnet non sicuro dal punto di vista della...

copyfail-go

CopyFail Go A maioria dos LPEs do Linux precisa de uma janela de corrida ou de um offset específico do kernel. Copy Fail é uma falha lógica em linha reta — não precisa de nenhum dos dois. O mesmo script Python de 732 bytes binário Go estático dá root a todas as distribuições Linux lançadas desde...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail – Schadensbegrenzung – Linux-Kernel Dieses Repository enthält Skripte, die dazu dienen, die kritische Schwachstelle CVE-2026-31431 , auch bekannt als „Copy Fail“ , auf Ubuntu-Systemen zu neutralisieren. !IMPORTANT Kompatibilität: Diese Skripte sind auf Ubuntu Server...

-CVE-2026-23829-CTT-Mailpit-phase-reconstruction-

SimoesCTT-mailpit-phase-reconstructor È un'iniezione CRLF nel server SMTP di Mailpit — una classica vulnerabilità di corruzione dei dati. Ma sotto CTT, non è solo un bug. È un'opportunità di ricostruzione di fase. CVE-2026-23829 root@kitploit: CTT-Mailpit-Phase-Reconstructor CVE-2026-23829 — Prov...

CVE-2026-20127-Exploit-Extension

Zusammenfassung Der CVE-2026-20127 Defensive Companion ist eine erstklassige, Enterprise-taugliche Browser-Erweiterung, die für proaktive Threat Intelligence und defensive Analyse entwickelt wurde. Dieses Werkzeug bündelt maßgebliche technische Forschungserkenntnisse zu der...