56974 matches found
whatsapp-mitd-mitm
WhatsApp MitD & MitM Introduction This repository contains PoC code and tools that were developed as part of our research 01 on remotely exploiting Man-in-the-Disk MitD vulnerabilities on WhatsApp for Android. As discussed in our blog post, the code and accompanying scripts found here, were used ...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
In the Linux kernel before version 6.4.12, amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c contains a use-of-fence issue...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: NFC: Digital layer: fixed a possible memory leak in digitalinsendsddreq. The skb buffer is allocated in digitalinsendsddreq, but it is not freed when digitalinsendcmd fails. This could lead to a memory leak. The issue is fixed by...
Astra Linux – Vulnerability in libgit2
libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Previous versions of libgit2 required the caller to set the certificatecheck field of the libgit2’s...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated authlength field read from the network triggered a WINPRASSERT failure in rtsreadauthverifiernochecks, causing any FreeRDP client connecting through a malicious RDP Gateway to crash with...
Astra Linux – Vulnerability in glibc
The Name Service Cache Daemon’s nscd netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. This flaw was introduced in glibc 2.15, when the cache was added to nscd. This vulnerability only exists in the nscd binary...
Astra Linux – Vulnerability in Apache2
Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: mptcp: pm: in-kernel: always sets ID as available when rm endp is called. Syzkaller managed to identify a combination of actions that caused this warning to occur: WARNING: net/mptcp/pmkernel.c:1074 at marksubflowendpavailable...
Astra Linux – Vulnerability in Thunderbird
Thunderbird ignored the configuration that required STARTTLS security for SMTP connections. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication...
Astra Linux – Vulnerability in PostgresSQL 11
A man-in-the-middle attacker can inject false responses to the client’s first few queries, despite the use of SSL certificate verification and encryption...
CVE-2022-32981
CVE-2022-32981 poc for CVE-2022-32981 under work needs testing + adjusting the offset to the correct one for exploit function...
CVE-2023-0157
CVE ID : CVE-2023-0157 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...
CVE-2024-25291
DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...
CVE-2026-15911-Confluent_Kafka
CVE-2026-15911: Отключена проверка TLS-сертификатов для HashiCorp Vault KMS в confluent-kafka Уровень опасности: Высокий, CVSS 3.1 7.4 Вектор v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Затронуто: confluent-kafka = 2.8.0, = 2.14.2 Исправлено в: 2.15.0 CWE: CWE-295 Некорректная проверка...
cve-2025-55182
CVE-2025-55182: 악용 아티팩트 이 문서는 CVE-2025-55182 React2Shell 취약점에 대한 VulnCheck Initial Access Intelligence 아티팩트의 소규모 하위 집합을 내보낸 것입니다. 이 아티팩트에 대한 팀의 일부 관찰 내용은 블로그 게시물에서 읽을 수 있습니다. 목차 ./inmem-webshell - 인메모리 웹셸 변종 빌드 모든 구성 요소는 당사의 익스플로잇 프레임워크인 go-exploit으로 빌드됩니다. 각 디렉터리에는 관련 아티팩트의 복사본이 포함되어 있습니다...
sk-cve-2026-26030-lab
CVE-2026-26030 — Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...
Harald
Harald CPU Harald — это крошечный высокоуровневый CPU, работающий в памяти и способный обрабатывать набор инструкций для генерации протоколов прикладного уровня , используемых поверх заданного сетевого протокола TCP/UDP. Harald потребляет поток OPCODE и применяет различные преобразования к полезн...
Copy_Fail2-Electric_Boogaloo
Copy Fail 2: Electric Boogaloo xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path를 통한 비권한 Linux LPE. 읽을 수 있는 모든 파일에 대한 page-cache 쓰기. /etc/passwd의 nologin 줄을 sick::0:0:...:/:/bin/bash로 덮어쓰고 su로 진입한다. Copy Fail CVE-2026-31431과 같은 부류지만 다른 서브시스템이다. 버그:...
Linux Distros Unpatched Vulnerability : CVE-2026-105217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the...