Zlib Base64 Frame Transform

Compresses each C2 chunk with zlib, then frames it as a length-prefixed Base64 line. !/usr/bin/env python3 -- coding: utf-8 -- import base64 import struct import zlib from typing import Optional from kittysploit import FRAMEPREFIX = b"KZ64 " FRAMESUFFIX = b"\n" MAXFRAMESIZE = 1024 1024 class...

PHP Base64 Frame Transform

Frames C2 chunks as length-prefixed Base64 lines and emits PHP client code. !/usr/bin/env python3 -- coding: utf-8 -- from typing import Optional from modules.transforms.python.stream.base64frame import Module as PythonBase64FrameTransform class ModulePythonBase64FrameTransform: """PHP Base64...

PT-2026-57305

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.2.6 Description The RabbitMQ stream listener fails to enforce the configured stream frame-size limit when assembling frames during authentication and before Tune negotiation. This allows an unauthenticated remote...

ROS-20260710-73-0009

The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation 4 blocksamples channels in gstwavpackdechandleframe causes a very small heap allocation. The WavPack library then writes...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

ROS-20260709-73-0023

The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...

activity-browser (>=3.0.0b966, <=3.0.0b202610031934), aibench (>=0.0.2, <=0.0.5) +98 more potentially affected by CVE-2026-55206 via py7zr (>=0.4.4, <=1.1.0)

py7zr PYPI version =0.4.4, =3.0.0b966, =0.0.2, =0.0.0, =1.0.12, =0.9.0, =0.7.4, =3.5.4, =0.6.42, =0.2.1, =1.0.0, =2.0.1, =0.5.4, =0.10.0 - cafex 1.0.0 - cafex-api 1.0.0 - cafex-core 1.0.0 and more Source cves: CVE-2026-55206 Source advisory: MEND:CVE-2026-55206...

kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...

CVE-2026-15062

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK snowpark-python versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database...

CVE-2026-58266 Anki: User scripts in iframes have access to the internal Anki API

Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal localhost API, and user scripts included via iframes in the editor can access this API despite protections intended to block reviewer and edito...

EUVD-2026-42103

Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and assigns it directly to an iframe source without scheme validation. If a logged-in user opens a crafted workspace link containing a javascript: URL, JavaScript runs on the Dashy...

ak-frame-extractor (>=1.0.0, <=1.1.0), systembridgebackend (>=3.0.0.dev1, <=3.0.7) +2 more potentially affected by CVE-2025-59042 via pyinstaller (5.0.1)

pyinstaller PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - ak-frame-extractor =1.0.0, =3.0.0.dev1, =3.0.0.dev1, =3.0.0.dev1, =3.0.7 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception via the maxdatagramframesize parameter when it is set to a very small value. An attacker can cause the server to crash by sending specially crafted datagram frames that exploit this configuration. Remediation Upgrade...

GO-2026-5807 Hysteria vulnerable to server crash when max_datagram_frame_size very small in github.com/apernet/hysteria

Hysteria vulnerable to server crash when maxdatagramframesize very small in github.com/apernet/hysteria. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

PYSEC-2026-1692 nbgrader's `frame-ancestors: self` grants all users access to formgrader

Impact Enabling frame-ancestors: 'self' grants any JupyterHub user the ability to extract formgrader content by sending malicious links to users with access to formgrader, at least when using the default JupyterHub configuration of enablesubdomains = False. 1915 disables a protection which would...

nbgrader's `frame-ancestors: self` grants all users access to formgrader

ImpactEnabling frame-ancestors: 'self' grants any JupyterHub user the ability to extract formgrader content by sending malicious links to users with access to formgrader, at least when using the default JupyterHub configuration of enablesubdomains = False.1915 disables a protection which would...

PYSEC-2026-1797 Cross-Frame Scripting vulnerability has been found on Plone CMS

A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element...