CVE-2026-74835

A flaw was found in the inets application HTTP server httpd. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted chunked request that fails to enforce a configured body-size limit. This can lead to memory exhaustion, causing a Denial of Service DoS on...

CVE-2026-73812

A flaw was found in the inets httpd server, part of Erlang/OTP. The server incorrectly processes HTTP requests that contain both Transfer-Encoding: chunked and Content-Length headers, failing to reject them or close the connection as required by RFC 9112 §6.1. When inets is deployed behind a...

CVE-2017-10271

LAB 2 - CVE-2017-10271 : Analyse de la désérialisation XMLDecoder de WebLogic I. Analyse du système Analyse des journaux système Service détecté : Oracle WebLogic Server AdminServer appartenant à basedomain s'exécutant en mode développement. Port de connexion : 7001. Protocoles supportés : http,...

CVE-2026-84887

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action Execution Workflow. The manipulation leads to denial of service. Remote exploitation of the attack is possibl...

CVE-2026-84885

A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file codeagent.py of the component CodeAgent. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-84886

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

CVE-2026-84888

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

GhostLock-H80GT

English | 中文 Honor 80 GT Privilege Escalation PoC: GhostLock CVE-2026-43499 A local privilege escalation exploit for the Honor 80 GT AGT-AN00 , CVE-2026-43499 — a use-after-free in the kernel rtmutex removewaiter path — plus a companion KernelSU kernel-module loading solution. In principle the bu...

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

InSAT MasterSCADA BUK-TS - Unauthenticated RCE CVE-2026-22553 | CVSS 9.8 Critical | Exploit Author Mohammed Idrees Banyamer 📝 Description InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers t...

CVE-2024-1086

CVE-2024-1086 Exploit Proof-of-Concept d'escalade de privilèges locale universel pour CVE-2024-1086, fonctionnant sur la plupart des kernels Linux entre v5.14 et v6.6, incluant Debian, Ubuntu et KernelCTF. Le taux de succès est de 99,4% dans les images KernelCTF...

meterpreter-exploit-reverse-shell-on-remote-vm

Meterpreter Reverse Shell Lab VM remota ⚠️ AVISO — SOLO...

kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

kernel: nfsd: release layout stid on setlease failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When a setlease operation fails, the system prematurely releases a layout state identifier. An attacker could exploit this by triggering the failure, leading to a use-after-free vulnerability. This could result in a system...

kernel: NFSv4/flexfiles: reject zero filehandle version count

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

wyze-bulb-color-pwned

wyze-bulb-color-pwned Exploit sans fil pour l'ampoule colorée Wyze WLPA19CV2 Aperçu Les ampoules colorées Wyze WLPA19CV2 disposent d'un mode de test d'usine qui permet de flasher sans fil une image OTA personnalisée via une séquence spécifique de cycles de mise sous/hors tension. Ce projet fourni...

PoC-2023-43208

CVE-2023-43208-EXPLOIT استغلال تنفيذ التعليمات البرمجية عن بُعد RCE في Mirth Connect ⚠️ للاستخدام التعليمي والمختبري فقط ⚠️ استغلال إثبات المفهوم لـ CVE-2023-43208، وهي ثغرة تنفيذ تعليمات برمجية عن بُعد في Mirth Connect قبل الإصدار 4.4.1. 🚨 إخلاء مسؤولية قانوني مهم هذه الأداة مخصصة فقط لـ: 🧪...

Tenda-F3-V4

Tenda F3 Router Exploit & File Downloader This project is a tool for downloading various files from the Tenda F3 router v3/v4 through an unauthenticated vulnerability CVE-2020-35391. It allows you to get the configuration file, system log, and flash dump from a vulnerable router. Overview The...

CTF-Magic

CTF-Magic A GUI-based CTF exploitation framework for Debian...

offensive-security-adversary-emulation

المشروع 5 — الأمن الهجومي ومحاكاة الخصوم جزء من سلسلة من 5 مشاريع لمركز عمليات أمنية SOC منزلي: البناء ← الكشف والإثراء ← التحقيق ← المراقبة والاصطياد ← الهجوم والتحقق المتبادل. هذا المشروع يضيف النصف المفقود من الصورة مقارنةً بالمشاريع 1–4: كل ما سبق كان في جانب الفريق الأزرق بناء الكشوفات،...