CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — Detection & Response Kit Detection, hunting, and remediation resources for CVE-2026-76461 , a critical SQL injection vulnerability in Cisco AsyncOS for Cisco Secure Email Gateway SEG. ⚠️ Disclaimer This repository contains defensive content only : Sigma rules, YARA rules, technica...

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

CVE-2026-89855

A flaw was found in the Linux kernel's scsi: qla2xxx component. A local attacker could exploit a race condition in the flash version read handler. By concurrently triggering a sysfs reset operation and other flash operations, an attacker could corrupt flash register reads. This could lead to data...

CVE-2026-89562

A flaw was found in the Linux kernel's IPv6 Generic Routing Encapsulation GRE subsystem. The kernel incorrectly calculates the hardware header length for Non-Broadcast Multiple Access NBMA tunnel interfaces by improperly accumulating the underlying device's header length. A local authenticated...

CVE-2026-80913

A flaw was found in the Linux kernel's SELinux subsystem. An attacker with local access could exploit this by providing a specially crafted SELinux policy. This policy, containing an incorrect number of defined boolean values, would cause the kernel to attempt to access an invalid memory location...

CVE-2026-80888

A flaw was found in the drm/vmwgfx component of the Linux kernel. An unprivileged client can exploit this vulnerability by passing a specially crafted file descriptor fd to the DRMVMWGBSURFACEREF or DRMVMWGBSURFACEREFEXT paths. This can lead to a dmabuf reference leak, causing resource exhaustion...

CVE-2026-80786

A flaw was found in the fbdev subsystem of the Linux kernel. This vulnerability occurs because certain user-invoked display mode changes, specifically those not using the FBIOPUTVSCREENINFO ioctl, fail to properly update the fbcon state. A local user could potentially exploit this by triggering a...

CVE-2026-80742

A flaw was found in the Linux kernel's afpacket Address Family Packet component. A local attacker could exploit this vulnerability by sending specially crafted zero-byte packets through the TPACKET ring buffer on devices without a hard header. This improper handling of zero-length packets can cau...

APKiD

APKiD APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting Detecting Pirated and Malicious Android...

CVE-2025-29927-PoC

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This repository contains a Proof of Concept PoC exploit for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks by abusing a middleware-specific HTTP header. Overview CVE ID:...

CVE-2026-18322

CVE-2026-18322 — Smart Popup by Supsystic Privilege Escalation Security research on CVE-2026-18322 , an unauthenticated privilege-escalation vulnerability in the WordPress plugin Smart Popup by Supsystic popup-by-supsystic. This repository contains a root-cause analysis derived from the upstream...

CVE-2026-98608

A flaw was found in the Linux kernel's VirtIO GPU graphics processing unit driver. When handling resource creation requests, an improper error-handling path fails to release acquired object references upon failure, causing memory and system resources to leak. A local user could exploit this flaw ...

CVE-2026-98609

A flaw was found in the Linux kernel's VirtIO GPU driver. When graphics buffer handle creation fails, the driver improperly handles object references, preventing cleanup functions from freeing allocated memory and host resources. A local attacker could exploit this vulnerability to trigger a...

CVE-2026-25924

CVE-2026-25924 PoC - Kanboard Admin RCE Proof-of-Concept for Administrative RCE via Security Control Bypass Disclosure: Originally reported by me via GHSA-grch-p7vf-vc4f ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-25924 Severity| 🔴...

CVE-2026-95210

A flaw was found in GnuTLS. Improper certificate validation causes the library to accept certificates containing invalid extensions. A remote attacker could exploit this flaw by presenting a specially crafted certificate during a secure connection. Successful exploitation may allow an attacker to...

CVE-2026-92834

A flaw was found in Apache Thrift. The C++ WebSocket server mishandles uninitialized resources and returns an incorrect status code when processing requests. Under specific conditions, a remote attacker could exploit this vulnerability to trigger improper application states and compromise system...

CVE-2026-94648

A flaw was found in Apache Thrift. The Dart bindings fail to properly restrict or throttle resource allocation when processing incoming requests. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input, causing excessive resource consumption that lea...

CVE-2026-94644

A flaw was found in Apache Thrift's PHP bindings. A remote, unauthenticated attacker can exploit this vulnerability by sending requests that trigger unbounded resource allocation without proper limits or throttling. This failure to control consumption can exhaust system resources, resulting in a...

GHSA-57XQ-RJX2-V5XH @angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8 and RouterLink directives are rendered with queryParamsHandling: 'merge' or 'preserve', configured either per link or globally via defaultQueryParamsHandling. Starting i...

@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8 and RouterLink directives are rendered with queryParamsHandling: 'merge' or 'preserve', configured either per link or globally via defaultQueryParamsHandling. Starting i...