CVE-2026-80327 Open Redirect in PingGateway Fragment Filter

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...

CVE-2026-80327

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This vulnerability impacts PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. The issue allows for redirection to untrusted sites and is addressed in versions 2024.11.2...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

killasa

killasa Vulnerability Test for CVE-2016-1287 Cisco ASA invalid IKE fragment length Negotiates IKEv2 SA with Cisco fragmentation enabled, then sends two IKE fragments, one of which has an invalid length of 1 octet...

CVE-2026-105696

The Penpot design and prototyping platform is vulnerable to a page-scope escalation in versions prior to 2.18.0 . The get-page and get-file-fragment RPC commands fail to verify if a requested page-id or fragment belongs to the authorized set of a provided share-link permission object. An authenti...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 네이티브 Python 크로스 버전 디컴파일러 및 프래그먼트 디컴파일러입니다. decompyle, uncompyle, uncompyle2의 후속 제품입니다. 이에 대해 BlackHat Asia 2024 에서 발표했습니다. 소개 uncompyle6 는 Python 바이트코드를 다시 동등한 Python 소스 코드로 변환합니다...

CVE-2026-43503

🚨 CVE-2026-43503 — DirtyClone When Shared Memory Stops Being Shared Safely. A Local Privilege Escalation vulnerability caused by improper propagation of the SKBFLSHAREDFRAG flag inside the Linux networking stack. 📖 Overview CVE-2026-43503 , nicknamed DirtyClone , is a High Severity Local Privileg...

Zimbra-CVE-2017-8802-Hotifx

CVE-2017-8802 This Zimlet fixes CVE-2017-8802 by disabling the "Show Fragment" / Snippet functionality. For further information see: https://wiki.zimbra.com/wiki/ZimbraSecurityAdvisories How to deploy Zimlets https://www.zimbra.com/docs/os/6.0.10/administrationguide/Zimlets.11.4.html...

fhex

Fhex - 완전한 기능을 갖춘 16진수 편집기 이 프로젝트는 가볍지만 유용한 도구를 개발하기 위해 탄생했습니다. 그 이유는 기존의 16진수 편집기들이 몇 가지 다른 제한 사항이 있기 때문입니다예: 너무 많은 의존성, 16진수 색상 기능 부족 등. 이 프로젝트는 qhexedit2 , capstone 및 keystone 엔진을 기반으로 합니다. 향후 새로운 기능이 추가될 수 있으며, PR을 환영합니다. 기능 청크 로더 - 대용량 파일의 일부만 로드하여 메모리를 소모하지 않도록 사용됩니다 청크 간 이동은 alt + 왼쪽/오른쪽 화...

PT-2026-106217

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists where the get-page RPC Remote Procedure Call accepts a share-link permission object providing broad read access but fails to verify if the requested page-id is among the pages...

LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass

LiteLLM Proxy before 1.84.0 derives its public-route authorization check from a URL reconstructed with the unvalidated Host header. A Host value containing a fragment can make a protected request appear to target the public root route, bypassing the API-key check. Version 1.84.0 derives the route...

HAProxy-CVE-2023-45539-PoC

HAProxy-CVE-2023-45539-PoC HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server. What gets misroute...

PoC-Exploit-CVE-2024-20467

Exploit for Cisco IOS XE CVE-2024-20467 Vulnerability Overview This exploit targets a vulnerability in the IPv4 fragment assembly code found in Cisco IOS XE Software. The vulnerability allows an unauthenticated remote attacker to cause a denial of service DoS condition on vulnerable devices...

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

CVE-2026-11102 – OAuth2 Implicit Grant 프래그먼트 하이재킹 프로그램 코드 Node.js + 익스플로잇 // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri = req.query.redirecturi; const state = req.query.state ...

SG-2026-0024

Dirty Frag 프리미티브 전용 PoC CVE-2026-43284 XFRM/ESP 및 CVE-2026-43500 RxRPC/RXKAD용 읽기 가능한 N4C 데모. 이 PoC는 한 가지 질문에 답합니다: 권한이 없는 프로세스가 공유skbuff 프래그먼트를 통해 root 소유의 읽기 전용 파일의 페이지 캐시를 변경할 수 있는가? 이는 /usr/bin/su나 /etc/passwd를 덮어쓰지 않으며, 페이로드를 설치하지 않고, PAM/NSS를 호출하지 않으며, 셸을 시작하지 않습니다. 전체 공개 익스플로잇은 exploit 브랜치에...

CVE-2026-27384

CVE-2026-27384 CVE-2026-27384 — W3 Total Cache mfunc/eval RCE Scanner Plugin: W3 Total Cache Plugin Slug: w3-total-cache CVE ID: CVE-2026-27384 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Vulnerability Type: Unauthenticated Arbitrary Code Execution Code...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_0760)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260760 advisory. kernel: smb: client: Fix use-after-free in cifsfilldirent CVE-2025-38051 kernel: smb: client: let recvdone verify dataoffset, datalength and...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_5082)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20215082 advisory. samba: Active Directory AD domain user could become root on domain members CVE-2020-25717 samba: SMB1 client connections can be downgraded to plaintext...

DEBIAN-CVE-2026-71971

U-Boot before 2026.10-rc3 with CONFIGIPDEFRAG enabled contains an out-of-bounds write vulnerability in the netdefragment function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash the...

CVE-2026-71971

The U-Boot bootloader (versions before 2026.10-rc3 ) is vulnerable to an out-of-bounds write in the ‘net_defragment‘ function within net/net.c when CONFIG_IP_DEFRAG is enabled. A remote attacker can trigger this by sending a crafted IP fragment with a non-zero offset and the More-Fragments flag s...