cve-2023-30861-poc

CVE-2023-30861 PoC Proof of Concept ⚠️ VORSICHT Dieses Projekt ist ein PoC zur Reproduktion der Schwachstelle CVE-2023-30861 in Flask. Führen Sie es auf keinen Fall in einer dem Internet ausgesetzten Umgebung aus. Bei Verbindung mit einem extern erreichbaren Netzwerk kann es für reale Angriffe...

Oracle-mysql-CVE-2012-2122

Vulnerabilità di bypass dell'autenticazione Mysql CVE-2012-2122 Quando ci si connette a MariaDB/MySQL, la password inserita viene confrontata con quella corretta prevista; a causa di una gestione errata, anche se memcmp restituisce un valore diverso da zero, MySQL può comunque considerare le due...

NextJS-CVE-2025-29927

🔓 NextJS-CVE-2025-29927 - संवेदनशील प्रदर्शन अनुप्रयोग यह एक संवेदनशील Next.js अनुप्रयोग है जो CVE-2025-29927 को प्रदर्शित करता है, जो कि Next.js का उपयोग करने वाले वेब अनुप्रयोगों में अनुचित इनपुट हैंडलिंग या एक्सेस नियंत्रण दोषों के कारण पहचाना गया एक सुरक्षा दोष है। यह परियोजना MySQL बैकएंड और...

CVE-2026-43499

CVE-2026-43499 शोषण नोट्स गंभीरता: उच्च CVSS: 7.8 प्रभाव: गोपनीयता, अखंडता, उपलब्धता प्रकाशित: 2026-05-21 तकनीकी सारांश CVE-2026-43499 लिनक्स कर्नेल में एक कमजोरी है, विशेष रूप से rtmutex घटक को प्रभावित करती है, जो रियल-टाइम म्यूटेक्स लॉक के प्रबंधन के लिए जिम्मेदार है। यह कमजोरी रियल-टाइम लॉक क...

webscreenshot

webscreenshot الوصف نص برمجي بسيط لأخذ لقطات شاشة لقائمة من المواقع، يعتمد على نص url-to-image الخاص بـ PhantomJS. الميزات دمج ميزة 'lazy-rendering' من url-to-image للموارد AJAX يعمل بكامل وظائفه على أنظمة Windows و Linux دعم تعريف الكوكيز ورؤوس HTTP المخصصة لمحرك العرض PhantomJS المعالجة المتعدد...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

shuffledns

Wrapper di massDNS per fare brute-force e risolvere i sottodomini con supporto per la gestione dei wildcard Funzionalità • Installa • Esegui • Wildcard • Licenza • Discord shuffleDNS è un wrapper attorno a massdns, scritto in Go, che permette di enumerare sottodomini validi usando brute-force...

intelmq

docs/index.md...

waymore

Informazioni - v8.9 L'idea alla base di waymore è quella di trovare ancora più link dalla Wayback Machine e da altre fonti rispetto ad altri strumenti esistenti. 👉 La più grande differenza tra waymore e altri strumenti è che può anche scaricare le risposte archiviate per gli URL su Wayback Machin...

CVE-2026-80538

A flaw was found in the XFS filesystem within the Linux kernel. The xfsrtginodeensure function incorrectly handles errors returned by xfsrtginodeload, treating I/O, allocation, or corruption errors as successful operations. This oversight can result in the realtime group inode remaining unset,...

CVE-2026-80565

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80559

CVE-2026-80559 is a Linux kernel vulnerability in the sur40 input driver. The root cause is an incorrect registration ordering in sur40_probe(): input_register_device() was called before the V4L2 video device and vb2_queue were fully initialized. If userspace opened the input device immediately, ...

CVE-2026-80544 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80538 xfs: propagate errors from xfs_rtginode_load

In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfsrtginodeload xfsrtginodeensure treats every xfsrtginodeload error other than -ENOENT as success. This can leave the realtime group inode unset after an I/O, allocation, or corruption error. Growfs th...

CVE-2026-80534 xfs: fix ilock leak on error in xfs_dq_get_next_id

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, leaking the quota...

CVE-2026-80529 xfs: don't swallow dquot recovery verification errors

In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlogrecoverdquotcommitpass2 validates the recovered dquot with xfsdqblkverify and, on failure, sets error = -EFSCORRUPTED and jumps to outrelease. But outrelease unconditional...

CVE-2026-74741

CVE-2026-74741 is a NULL pointer dereference in the Linux kernel's ngbe network driver, occurring in the non-MSI-X interrupt enabling path. When the driver operates in legacy INTx or single MSI mode, the wx->msix_entry pointer is not allocated or initialized, so calling NGBE_INTR_MISC(wx) dere...

CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...