KLA91272 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...

KLA91268 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

CVE-2026-63030

CVE-2026-63030 — WordPress wp2shell Exploit Unauthenticated detection and exploitation tool for the WordPress core batch-confusion vulnerability CVE-2026-63030 / CVE-2026-60137, which leads to SQL injection and remote code execution RCE through the REST API batch endpoint. ⚠️ For authorized...

WP-Contest-Gallery-28.1.4-Exploit

⚠️ 测试中 此PoC正在积极测试和完善。功能可能在不同版本之间发生变化。 CVE-2026-3180 WordPress Contest Gallery — 未认证盲SQL注入 CVE-2026-3180的概念验证评估工具 作者：Sudeepa Wanigarathna · 原始发现：cardosource !重要 仅限授权使用。 此工具仅用于安全研究、教育和测试您拥有或获得明确书面许可的系统。未经授权访问计算机系统是违法的。作者不对滥用行为承担任何责任。 目录 概述 漏洞详情 功能特性 安装 快速开始 使用指南 命令参考 注入技术 WAF绕过 数据提取 集成 攻击链 输出与报告...

CVE-2026-49952

安装 root@kitploit: pip3 install Pillow torch torchvision 运行 root@kitploit: $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX | +----------------------------------------------------+ + Getting...

CVE-2025-64446-Exploit

CVE-2025-64446 利用 CVE-2025-64446 在 fortiweb WAF 上的利用，通过此漏洞利用你可以创建用户和密码。 如何运行？ root@kitploit: python3 exploitforti.py targets.txt python3 exploitforti.py 192.168.1.1 python3 exploitforti.py 192.168.1.1:8443 python3 exploitforti.py https://192.168.1.1:8443 结果示例： 电报：https://t.me/GOTOCVE...

CVE-2024-6678

CVE-2024-6678 - GitLab: Pipeline Schedule Arbitrary User Trigger CVE-2024-6678 的 PoC 漏洞描述 GitLab 允许用户通过「Play」按钮手动触发 CI/CD 流水线计划（Pipeline Schedules）。该漏洞在于，「play」功能允许拥有 Developer 权限的任何用户 （而不仅仅是计划所有者）触发该计划。这会导致两个后果： 1. 开发者触发了一个由更高权限用户（Maintainer / Owner）创建和配置的计划。 2. 触发的流水线继承了计划中的环境变量（包括敏感变量），尽管...

CVE-2026-86544

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...

HavocPwn

Havoc-PWN Autenticado Esta cadena SSRF-RCE fue inspirada por el POC SSRF de CVE-2024-41570 de chebuya y el Havoc Auth RCE de IncludeSecurity; ambos exploits son increíbles y están muy bien elaborados, ¡por favor den a estos creadores el reconocimiento por su arduo trabajo! chebuya hyperreality...

CVE-2026-86544

Knowns versions prior to 0.30.0 are affected by an authorization bypass vulnerability in the permissions system. Mutating code actions are incorrectly classified as read-only operations , allowing attackers holding read-restricted sessions to exploit code.replace to modify permission configuratio...

CVE-2026-86544 knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...

CVE-2026-86544 knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...

CVE-2026-86544 knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...

yj_nearbyglasses v1.0.10

yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...

CVE-2026-28576-poc

CVE-2026-28576: Inyección SQL en el Contacts Provider de Android Un contacto seleccionado, todos los contactos: una puerta de compatibilidad targetSdk convierte una concesión de selección de un solo contacto en un volcado completo de la base de datos de contactos. Android 17 reforzó el Contacts...

CVE-2021-3156

CVE-2021-3156 PoC de shell root para CVE-2021-3156 sin fuerza bruta Con fines educativos, etc. Probado en Ubuntu 20.04 contra sudo 1.8.31 Todo el crédito de la investigación: Qualys Research Team Consulta los detalles en su blog. Puedes comprobar si tu versión de sudo es vulnerable con: $ sudoedi...

CVE-2026-46215-POC

CVE-2026-46215：DRM GEM changehandle 释放后使用（非特权LPE） 通过DRM核心ioctl DRMIOCTLGEMCHANGEHANDLE（drmgemchangehandleioctl，ioctl编号0xD2）中的释放后使用实现本地权限提升。任何有权访问渲染节点（/dev/dri/renderD，主流桌面发行版中由systemd-logind授予活动会话）的用户均可触发。本仓库中的利用链从非特权用户出发，实现无密码root权限提升。 CVE：...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Next.js Middleware / RSC 绕过分析 作者对因本研究造成的滥用或损害不承担任何责任 仅供教育和防御目的 描述 本仓库包含一个小型实验环境和针对 CVE-2025-55182 及其副本 CVE-2025-66478 的概念验证分析，涉及 Next.js React Server Components RSC 和 中间件授权绕过行为 。 此 PoC 的目标是重现漏洞所需的内部请求流条件，分析中间件行为，并理解 x-middleware-subrequest 在特定配置下如何影响受保护的路由。 本仓库 不...

EXPLOIT-CVE-2024-7804

CVE-2024-7804 — Deserialización insegura en PyTorch Distributed RPC RCE Laboratorio autocontenido + exploit para CVE-2024-7804 : ejecución remota de código en el framework RPC distribuido de PyTorch torch.distributed.rpc mediante deserialización insegura de datos no confiables CWE-502. Afectado:...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-0865 DESCRIPTION: User-controlled header names and values containing newlines can allow injecting HTTP headers. CWE:CWE-74: Improper Neutralization of...