security

Deskflow Security Proof-of-concept scripts for security vulne...

CVE-2026-14894

CVE-2026-14894 — Super Forms 未授权文件上传远程代码执行（RCE） Nonce 泄露 → datauristring 上传 → 代码执行 概述 CVE-2026-14894 是 WordPress 插件 Super Forms – Drag & Drop Form Builder（由 WebRehab 开发）中一个严重级别（CVSS 9.8）的未授权 任意文件上传漏洞，影响版本 ≤ 6.3.313 。 supersubmitform nopriv AJAX 处理程序在接收表单提交中的文件上传时，未进行以下检查： 1. 验证用户是否已认证 2. 校验文件类型或扩...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension 2.9.99.5 - Unauthenticated Arbitrary PHP File Upload & Remote Code Execution 🔎 Search Engine Queries Shodan root@kitploit:...

CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro 漏洞利用 未经身份验证的管理员接管 | CVSS 9.8 | 可直接使用 🔥 您将获得 适用于 CVE-2026-8732 的完整可用 Python 漏洞利用 无需身份验证即可创建管理员账户 返回神奇登录 URL – 立即接管站点 适用于 WP Maps Pro ≤ 6.1.0 隐秘、干净，默认不留日志 ⚡ 为什么选择我们 已在 50+ 个易受攻击的目标上测试 无冗余代码 – 纯粹的漏洞利用 适用于红队、渗透测试、漏洞赏金 此 CVE 的终身更新 全天候支持 🎯 适用人群 渗透测试人员 安全审计人员 红队行动...

vsftpd-cve-2011-2523-lab

VSFTPD 2.3.4 后门漏洞利用 CVE-2011-2523 一个实践性渗透测试实验，演示在故意存在漏洞的 Metasploitable2 虚拟机中使用 Metasploit 框架识别和利用 VSFTPD 2.3.4 后门漏洞 CVE-2011-2523。 免责声明 本项目完全在受控实验室环境中进行，使用了 Metasploitable2 （一款为网络安全教育设计的故意存在漏洞的虚拟机）。 在此次练习中未针对任何未经授权的系统或网络。 目标 本实验的目标是： 枚举目标机器上运行的服务。 识别存在漏洞的软件版本。 定位公开可用的利用代码。 使用 Metasploit 框架利用漏洞。...

lab-atox

🎯 LAB-RED Team — Account Takeover via XSS Tugas Kuliah Keamana...

Exploit for CVE-2026-8732

CVE-2026-8732 — WP Maps Pro Unauthenticated Admin Creation E...

CVE-2026-8461

🎬 CVE-2026-8461 — PixelSmash Critical Out-of-Bounds Write in FFmpeg MagicYUV Decoder A malicious video file can become a weapon. PixelSmash is a critical memory corruption vulnerability affecting FFmpeg's MagicYUV decoder that allows an attacker to trigger an out-of-bounds write , resulting in...

BIT-SPARK-2026-32773 Apache Spark: XSS Vulnerability in Spark Web 3.5.4

There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2020-12124

IoTエクスプロイトの構造：ハンズオンからRCEまで 原文はこちら：https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce 執筆者：David E. Baker、公開日：2023年6月1日 はじめに この調査は、2020年6月時点のWavlink Wireless-AC1200...

EUVD-2026-72654

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2026-76561 Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2026-76561

CVE-2026-76561 affects Dogtag PKI (pki-core), the certificate authority component used by FreeIPA . The certificate profile import functionality fails to fully validate uploaded profile content beyond the profile ID, allowing an authenticated user with CA Administrator privileges to exploit the E...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP（vkrnlintvsp.sys）Paged Pool 堆溢出 → 本地提权（LPE）。 本目录为 lab 用 PoC 源码（基于 MrAle98/CVE-2025-21333-POC，含本机补丁）。 1. 漏洞摘要 项| 内容 ---|--- CVE| CVE-2025-21333 类型| Heap-based Buffer Overflow 影响| 本地提权（EoP）；曾标记野外利用 组件| vkrnlintvsp.sys 漏洞函数|...

CVE-2026-10520

🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...

cve-2026-43499

IonStack 针对 Redmi Pad Pro（dizi）/ POCO Pad 5G 的内核漏洞利用。 Cloudflare Pages 部署（Git 集成） 1. 前往 Cloudflare Dashboard Workers & Pages Create Pages Connect to Git 2. 选择此仓库 3. 构建设置： 框架预设：None 构建命令：留空 构建输出目录：/ 4. 点击 Save and Deploy 5. 部署后，前往 Settings Functions 绑定资源： KV namespace bindings ：IONSTACK - 创建新的命名空间...

expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

A flaw was found in libexpat, a library used for parsing XML data. An attacker could exploit a heap-based buffer overflow, a type of memory error, by providing specially crafted XML input. This vulnerability occurs when the library mishandles memory reallocation while processing XML, particularly...

iQOO-Z9_5G-vivo-T3_5G-Root-GhostLock

iQOO Z9 5G / vivo T3 5G Jailbreak Root GhostLock Installed KernelSU Una aplicación de Android jailbreak/root y payloads para iQOO Z9 5G y vivo T3 5G. Ambos dispositivos usan la plataforma MediaTek Dimensity 7200 MT6886. Hay dos métodos de ejecución compatibles: la APK de Android con Shizuku, o el...