CVE-2026-47881 Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

CVE-2026-47881 Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

EUVD-2026-66844

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

CVE-2026-47881

Spring Batch's FlatFileItemReader is vulnerable to a Denial of Service via a specially crafted input file. Because the reader supports logical records spanning multiple physical lines (e.g., quoted CSV fields with embedded newlines), a malicious file can exploit the record-assembly logic to consu...

nifi-CVE-2026-39816-poc

Apache NiFi CVE-2026-39816 POC Dimostrazione proof-of-concept per CVE-2026-39816, un bypass del permesso EXECUTECODE in Apache NiFi 2.8.0 che consente a un progettista di flussi a cui sono stati deliberatamente negati i privilegi di esecuzione del codice di eseguire Groovy arbitrario nella JVM di...

copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - PoC UAF Splice AEAD AFALG Implementazione multi-linguaggio e compatibilità con versioni precedenti di Python. C exploit.c root@kitploit: gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Testato su Ubuntu 20.04: Python exploit-python3-8-10.py Compatibile...

Starlette - Improper Validation of Unsafe Equivalence in Input

A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...

GhostLock-H80GT

Englisch | 中文 Honor 80 GT Privilege-Escalation-PoC: GhostLock CVE-2026-43499 Ein lokaler Privilege-Escalation-Exploit für das Honor 80 GT AGT-AN00 , CVE-2026-43499 — eine Use-after-Free-Schwachstelle im rtmutex-removewaiter-Pfad des Kernels — plus eine begleitende Lösung zum Laden des...

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

CVE-2026-53365

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK 零拷贝引用计数下溢,Page-Cache 改写提权 HackSpeak 分发镜像。本仓库为 MaherAzzouzi/vsockdrop 的分发镜像 ,代码与上游一致;上游未附 LICENSE,镜像按分发惯例采用 MIT License,Copyright c 2026 HackSpeak ,源码版权归原作者 MaherAzzouzi。 ⚠️ 包含完整本地提权LPEexploit ——会修改 /usr/bin/su 的 page-cacheCoW...

CVE-2026-30863-Exploit

CVE-2026-30863 – Parse Server JWT ऑडियंस सत्यापन प्रभावित संस्करण Parse Server 8.6.10 और 9.5.0-alpha.11 कमजोर घटक Google प्रमाणीकरण एडाप्टर GoogleAuthAdapter Apple प्रमाणीकरण एडाप्टर AppleAuthAdapter Facebook प्रमाणीकरण एडाप्टर FacebookAuthAdapter मूल कारण जब एडाप्टर को ऑडियंस पैरामीटर Google/App...

CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Struttura root@kitploit: src/ ├── main.rs Exploit: AFALG + splice per sovrascrivere /bin/su └── bin/ └── payload.rs Payload Binari nostd autonomi con zero dipendenze a runtime: poc-rs: 4,1 KB payload incorporato tramite includebytes! payload: 1,7 KB Build Richiede Rust...

apex v2.4.0-canary.d5c18874

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

CVE-2023-51385

CVE-2023-51385 PoC Exploit per CVE-2023-51385...

-CVE-2026-1657

CVE-2026-1657 Exploit CVE-2026-1657: caricamento di immagini non autenticato tramite endpoint AJAX 'epuploadfilemedia' USO python3 ./CVE-2026-1657.py https://site.com/ labrat.jpeg...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept che dimostra una vulnerabilità di divulgazione di informazioni in Microsoft Desktop Window Manager dwm.exe. Panoramica Questo repository contiene un Proof of Concept PoC personalizzato sviluppato per riprodurre CVE-2026-20805, una vulnerabilità di divulgazione ...

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script Этот скрипт на Python, реализующий Proof-of-Concept PoC, обнаруживает уязвимость Heartbleed CVE-2014-0160 путём выполнения TLS-рукопожатия с расширением heartbeat и отправки специально сформированного heartbeat-запроса. Он анализирует ответы сервера для выявления...

CVE-2026-41177-Squidex-CMS

CVE-2026-41177: Blind SSRF in Squidex CMS Ricerca tecnica e analisi per CVE-2026-41177: una vulnerabilità di Server-Side Request Forgery SSRF cieca nell'API di ripristino di Squidex CMS. Panoramica della vulnerabilità ID CVE: CVE-2026-41177 Componente interessato: API Squidex: motore di...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Elevazione dei privilegi della fotocamera virtuale Cross Device Ho scoperto e segnalato in modo indipendente il problema ora tracciato come CVE-2026-66804. MSRC ha confermato la mia segnalazione come duplicato di un rapporto precedente con la stessa causa principale sottostante di...

THERE-IS-A-CVE

There is a CVE TIAC 🕵️ There is a CVE è uno strumento di pentesting che sfrutta per identificare rapidamente vulnerabilità nei dispositivi connessi a Internet. Aiuta i professionisti della sicurezza a rilevare e valutare in modo efficiente le falle di sicurezza. Inoltre, integra per la ricerca di...