CVE-2026-90716 marcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-90716 marcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-90716 marcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

EUVD-2026-77443

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2024-6387

CVE-2024-6387 una condición de carrera en el manejador de señales del servidor OpenSSH sshd Descripción Un exploit para CVE-2024-6387, que apunta a una condición de carrera en el manejador de señales del servidor OpenSSH sshd en sistemas Linux basados en glibc. La vulnerabilidad permite la...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using free after in WebRTC in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted SCTP packet...

Astra Linux – Vulnerability in Samba

A null pointer dereference flaw was detected in Samba’s Winbind service in versions prior to 4.11.15, before 4.12.9, and before 4.13.1. A local user could exploit this flaw to crash the Winbind service, resulting in a denial of service...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source RDP server. Versions up to 0.10.5 contain a heap-based buffer overflow vulnerability in the NeutrinoRDP module. When proxying RDP sessions from xrdp to another server, the module fails to properly validate the size of reassembled fragmented virtual channel data against its...

Astra Linux – Vulnerability in Qemu

A reachable assertion issue was detected in the USB EHCI emulation code of QEMU. This issue can occur during the processing of USB requests due to a faulty handling of the DMA memory map. A malicious privileged user within the guest environment may exploit this flaw to send invalid USB requests,...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

ghostlock-oneplus

GhostLock — Jailbreak de Bootloader Bloqueado Exploit de kernel para dispositivos Android con bootloader bloqueado. Logra root temporal + instalación de KernelSU sin desbloquear el bootloader ni modificar la imagen de arranque. Detección automática en tiempo de ejecución de la versión del kernel...

cve-2018-8611

CVE-2018-8611 KTM UAF Exploit de Escalada de Privilegios Este es mi PoC de explotación de escalada de privilegios para CVE-2018-8611, escribí este exploit mientras estudiaba el curso de explotación del kernel de Windows de ost2. Disfruté mucho el curso y cómo aborda el tema paso a paso y los...

CVE-2017-16995

Descripción de la vulnerabilidad Ubuntu es un sistema operativo GNU/Linux de código abierto centrado en aplicaciones de escritorio, basado en Debian GNU/Linux. Recientemente, un hacker de sombrero blanco reveló que la última versión de Ubuntu Ubuntu 16.04 tiene una vulnerabilidad de escalada de...

CVE-2018-9995-DVR-Credentials-Extractor

Herramienta mostrar credenciales de DVR root@kitploit: Herramienta Original: https://github.com/ezelf/CVE-2018-9995dvrcredentials Título del Exploit: "Obtiene credenciales de DVR" CVE: CVE-2018-9995 Puntuación Base CVSS v3: 7.3 / 10 Cadena de Vector CVSS:...

wordpress-CVE-2022-21661

wordpress-CVE-2022-21661 version5.8.3 path：http://your target/wp-admin/admin-ajax.php The injection type is out-of-band, you need to specify dnslog yourself and replace ceye.io POST- DATA："taxquery":"field":"termtaxonomyid","terms":"1 and ifselect loadfileconcat'\',select...

Wordpress-cve-CVE-2022-21661

Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment This enviroment is setup with the Elementor Custom Skin, plugin to test the CVE-2022-21661. to start the enviroment console wp-lab$ ./start.sh To get the admin password get the log from the running container, a new pwd is generated every time the...

CVE-2024-32019-POC

Escalada de Privilegios mediante ndsudo Exploit Local de Netdata Este POC se utiliza para explotar una utilidad ndsudo vulnerable incluida con Netdata y escalar privilegios locales a root. El exploit funciona inyectando un binario malicioso en el PATH del usuario que se hace pasar por un comando ...

copy-fail-c

Copy Fail CVE-2026-31431 - Port en C English en ∙ 日本語 ja ∙ 简体中文 zh-cn ∙ 한국어 ko ∙ Русский ru Una reimplementación en C multiplataforma del LPE de Linux Copy Fail CVE-2026-31431, divulgado el 29 de abril de 2026 por Theori / Xint. Consulta el informe canónico en copy.fail para obtener la descripció...

CVE-2024-27876

CVE-2024-27876 Creador de exploit para libAppleArchive, lee el artículo aquí https://snoolie.gay/blog/CVE-2024-27876...

Apache-APISIX-CVE-2022-24112

Exploit de Ejecución Remota de Código en Apache APISIX CVE-2022-24112 Resumen Un atacante puede abusar del plugin batch-requests para enviar solicitudes y eludir la restricción de IP de la Admin API. Una configuración predeterminada de Apache APISIX con la clave de API predeterminada es vulnerabl...