CVE-2026-31431-python-copyfail-POC

CVE-2026-31431: Copy Fail — повышение привилегий в ядре Linux Copy Fail CVE-2026-31431 — это критическая логическая ошибка в криптографической подсистеме ядра Linux, которая позволяет непривилегированным пользователям получить повышение привилегий до root. Уязвимость затрагивает ядра Linux версий...

CVE-2026-31431

CopyFail2 CVE-2026-31431 — реализация на Python Python-порт эксплойта CopyFail2 для ядра Linux, использующий быстрый путь без COW MSGSPLICEPAGES в xfrm ESP-in-UDP для непривилегированного повышения привилегий в Linux. Заменяет запись nologin/false в /etc/passwd на пользователя uid-0 без пароля и...

cve-2026-31431-algif-aead-remediator

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — Средство устранения уязвимости algifaead Серьёзность: Высокая CVSS 7.8 — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Общие сведения CVE-2026-31431 — это локальная уязвимость повышения привилегий в модуле algifaead ядра Linux интерфейс криптографических...

CopyFail-for-dummies

Copy Fail / CVE-2026-31431 — Исследовательские заметки Обзор Этот репозиторий содержит очищенную техническую диаграмму и вспомогательные заметки об уязвимости ядра Linux, обычно называемой Copy Fail и отслеживаемой как CVE-2026-31431. Назначение этого материала: объяснить механизм ошибки на...

CVE-2026-21962

🔥 CVE-2026-21962 — Набор инструментов для обнаружения Oracle HTTP Server Безопасные, неэксплуатирующие инструменты обнаружения для выявления экземпляров Oracle HTTP Server и WebLogic Proxy Plug-in, затронутых уязвимостью CVE-2026-21962. 🧠 Обзор уязвимости CVE: CVE-2026-21962 Серьёзность:...

CVE-2026-2763-POC

Уязвимость Уязвимость возникает из-за реализации синтаксиса for-in. Область действия цикла for-in представлена парой байткодов: JSOP::Iter и JSOP::EndIter. CASEIter MOZASSERTREGS.stackDepth = 1; HandleValue val = REGS.stackHandleAt-1; JSObject iter = ValueToIteratorcx, val; // 1 if !iter goto...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Java GUI-версия инструмента эксплуатации уязвимости Oracle WebLogic Server Proxy Plug-In RCE удалённое выполнение кода. Структура проекта java-version/ ├── pom.xml Файл конфигурации проекта Maven ├── README.md Документация проекта ├── run.bat Скрипт запуска дл...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

CVE-2021-24307-all-in-one-seo-pack-admin-rce

Admin PHP unserialization RCE in All in one SEO pack CVE-2021-24307 Simple PoC of an admin authenticated RCE in AISEO = 4.1.0.1 provided as an example. Full write-up here: https://darkpills.com/php-unserialize-write-up-with-admin-rce-in-all-in-one-seo-pack-cve-2021-24307/ Usage: php exploit.php u...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — Critical Security Vulnerability 😈 🚨 Severity CVSS Score: 10.0 / 10 Critical Published: January 20, 2026 Risk Level: 🔥 Maximum — immediate action recommended 🧠 What is it? A critical vulnerability affecting: Oracle HTTP Server Oracle WebLogic Server Proxy Plug-in for Apache & II...

CVE-2026-73636

Authentication bypass by capture-replay in modauthdigest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle MITM attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client's share...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0,...

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

ImpactMany djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

CVE-2026-24061

CVE-2026-24061 Exploit - Work Version v0.1 Usage Run the script with a target host: python3 exploit.py 192.168.1.1 -p 2323 --debug Arguments positional arguments: target IP or hostname of the target options: -h, --help show this help message and exit -p, --port PORT Port default 23 --debug Enable...

dyen

dyen dyen loads a Mach-O dylib in memory using stock macOS Python and calls an exported entry point without dlopen on that dylib. The aim is that the image is never a standalone file on the target and is never registered with dyld. by cenobyte [email protected] 2026...

CVE-2026-73636

Authentication bypass by capture-replay in modauthdigest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle MITM attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client's share...