CVE-2026-23111-nftables-lab

CVE-2026-23111 nftables LPE: comprobación de exposición y laboratorio seguro Herramientas defensivas y un laboratorio de máquina virtual reproducible para CVE-2026-23111, la escalada de privilegios local por use-after-free en nftables del kernel de Linux una comprobación invertida de actividad de...

CVE-2025-31133

CVE-2025-31133 PoC Exploit Este documento explica la funcionalidad del script de Prueba de Concepto PoC proporcionado para la vulnerabilidad runc CVE-2025-31133. Resumen Vulnerabilidad: CVE-2025-31133 - Una condición de carrera de enlace simbólico en el manejo de maskedPaths de runc. Impacto: Un...

cve-2021-4034-mock

CVE-2021-4034 PwnKit Sistema de Vulnerabilidad Simulada Este proyecto es un sistema simulado que reproduce el principio de funcionamiento central de la vulnerabilidad CVE-2021-4034 Out-of-Bounds Read/Write ocurrida en el demonio pkexec de Linux. Sin una elevación real de privilegios SUID, simula ...

CVE-2026-86284 jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...

CVE-2026-86284

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...

EUVD-2026-72298

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...

CVE-2026-86284 jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...

Exploit for Use After Free in Linux Linux_Kernel

Galaxy A37 Root — CVE-2026-43499 Native payload for the Sam...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

React2Hell

🧨 React2Hell — Exploit CVE-2025-55182 🔥 Ejecución Remota de Código RCE en Next.js / React Server root@kitploit: █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ Next.js/React Server RCE...

CVE-2026-86282

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument...

EUVD-2026-72282

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument...

CVE-2026-86282 jaychouchannel Tourism-Management-System CommonDao CommonController.java sql injection

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument...

CVE-2026-86282 jaychouchannel Tourism-Management-System CommonDao CommonController.java sql injection

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument...

CVE-2025-27519

Exploit de escalada de privilegios Below CVE-2025-27519 Este repositorio contiene un script Bash de prueba de concepto PoC para explotar la vulnerabilidad de escalada de privilegios Below CVE-2025-27519 en sistemas Linux. El exploit permite a un usuario local escalar privilegios a root abusando d...

0xMiddleware

CVE-2025-29927: Explotación de Middleware en Next.js Esta herramienta demuestra y automatiza la explotación de la CVE-2025-29927 , una vulnerabilidad en Next.js que permite a un atacante omitir las comprobaciones de middleware como la autenticación abusando de la cabecera interna...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-78254 Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-78254 Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...