scadapack-secure-lock-poc

Verificador de fixture de bloqueo seguro SCADAPack Este repositorio es una prueba de concepto deliberadamente acotada para CVE-2026-81861. Verifica que dos fixtures controlados producidos con el DTM de Windows enviado por el proveedor pueden autenticarse y decodificarse utilizando material de cla...

Exploit-CVE-2026-18351

Exploit-CVE-2026-18351 Elementor Forms 拖放文件上传 - 未认证任意文件上传导致 RCE。🔥 𝘾𝙤𝙣𝙩𝙖𝙘𝙩: 𝙔𝙤𝙧𝙪 يورو 🔥 https://t.me/ChiefYoru — Channel https://t.me/TeamLeets — Group https://t.me/ChiefYoruPoCs...

AfterLife

AFTERLIFE Laboratorio de Detección de Persistencia de Revocación Cuando el restablecimiento de contraseña tiene éxito pero el atacante nunca se va. Un laboratorio local red/blue para una clase de vulnerabilidad: la credencial que sobrevive al evento que se suponía debía eliminarla. Incluye el...

CGA-9XPV-P62J-35VQ

Bulletin has no description...

CGA-QR4J-VG58-4XF6

Bulletin has no description...

CGA-47V3-Q2WF-P2VG

Bulletin has no description...

Exploit for Out-of-bounds Read in Linux Linux_Kernel

Abraxas Labs ·...

Exploit for CVE-2026-14962

CVE-2026-14962 Wordpress Plugin ELEX WooCommerce Request a Quo...

CVE-2026-89329

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

CVE-2026-89329 Device-mapper-multipath: local denial of service via blocking ipc send operations

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

CVE-2026-89329

A vulnerability in multipathd (part of Device-mapper-multipath ) allows a local attacker with access to the UNIX control socket to cause a Denial of Service . By sending valid commands and then ceasing to read replies, the attacker can cause the listener thread to block , resulting in legitimate ...

CVE-2026-89329 Device-mapper-multipath: local denial of service via blocking ipc send operations

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

EUVD-2026-76186

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

CVE-2026-89329

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

CVE-2026-88031

A flaw was found in go.mongodb.org/mongo-driver for version 1.17.10 and 2.9.1. Improper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored fil...

CVE-2026-84199

A flaw was found in Kyverno. A Server-Side Request Forgery SSRF vulnerability exists in the APICall feature due to improper validation of the URL field in a Policy's ServiceCall configuration. A user with namespace-level Policy creation permissions can exploit this to direct Kyverno to make HTTP...

CGA-9C6Q-72QW-2R53

Bulletin has no description...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

PoC — CVE-2026-39987 · Marimo Pre-Auth RCE CVSS 4.0: 9.3...

CVE-2025-2945

CVE-2025-2945 - pgAdmin4 认证后 RCE 漏洞利用 作者： G0D150NE 版本： 2.0.0 CVE： CVE-2025-2945 严重等级： 严重（CVSS 9.9） 📌 描述 针对影响版本 8.10 到 9.1 的 pgAdmin4 远程代码执行（RCE） 漏洞的漏洞利用。 该漏洞存在于 /sqleditor/querytool/download 端点中，querycommited 参数未经清理便传入 Python 的 eval 函数，从而允许任意代码执行。 ⚡ 功能特性 ✅ 自动版本检测 ✅ 从多个来源获取 CSRF 令牌 ✅ 服务器/组 ID 枚举 ✅...

CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys 任意物理内存读写 针对 TechPowerUp ThrottleStop.sys 驱动（CVE-2025-7771）的完整概念验证（PoC）。 一个已签名且仍可加载的内核驱动通过两个 IOCTL 暴露了未经校验的物理内存读写。 本仓库将该原语转化为可用的从管理员到 SYSTEM 的本地权限提升，并记录了一个设备命名怪癖， 该怪癖可绕过大多数基于路径和文件名的检测。 针对相同 IOCTL 的 PoC 早已存在（见致谢）。这是一个独立的完整利用链，而非原语演示。 受影响的驱动 字段| 值 ---|--- SHA256|...