330174 matches found
CVE-2025-55183
CVE-2025-55183 Scanner for React Server Functions source code exposure vulnerability. What is this? CVE-2025-55183: React 19.0.0-19.2.1 Server Actions can be exploited to expose their full source code including hardcoded secrets, API keys, and database credentials. References:...
CVE-2026-97422 drm/amdkfd: fix SMI event cross-process information leak
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...
EUVD-2026-86035
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...
CVE-2026-97422
A vulnerability in the Linux kernel 's drm/amdkfd component allows a cross-process information leak regarding SMI events. The issue arises because the kfd_smi_ev_enabled() function skips user privilege checks when pid=0. Consequently, PROCESS_START , PROCESS_END , and VMFAULT events are emitted w...
CVE-2026-97419 hsr: broadcast netlink notifications in the device's net namespace
In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...
CVE-2026-97419
The Linux kernel contains a vulnerability in the HSR (High-availability Seamless Redundancy) generic netlink family. Because the .netnsok flag is set to true, devices can reside in various network namespaces; however, two async notifiers—hsr_nl_ringerror() and hsr_nl_nodedown()—incorrectly use ge...
CVE-2026-79759
The web-based server management platform Termix (versions 1.7.0 through 2.5.1) is vulnerable to cross-user information disclosure due to a missing ownership check in the POST /credentials/:id/deploy-to-host endpoint. Located in src/backend/database/routes/credentials.ts, the application fails to ...
CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing
4. CVE-2026-2828 – WebGPU Cross‑Origin Pixel Stealing via Timing Overview A malicious website uses WebGPU compute shader timing to measure rendering time of a cross‑origin iframe, recovering pixel values of sensitive content e.g., banking details. Severity: High Information Disclosure...
EQGRP_Lost_in_Translation
EQGRP Lost in Translation Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg Downloaded from https://yadi.sk/d/NJqzpqo3GxZA4 Original post from the ShadowBrokers https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation windows : contains Windows exploits,...
CVE-2026-79758
The Termix web-based server management platform (versions 1.8.0 through 2.5.1 ) contains a vulnerability where authenticated users can access the server-stats API without per-host authorization. Specifically, the src/backend/ssh/server-stats.ts routes allow users to view host online/offline statu...
CVE-2026-79758 Termix: Authenticated users can read other users' host status and clear global SSH connections
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET...
PenBox
PenBox – Un Framework de Pruebas de Penetración Un Framework de Pruebas de Penetración, El Repositorio del Hacker, nuestra esperanza es que en la última versión tendremos cada script que un hacker necesita Recopilación de Información : nmap Setoolkit Escaneo de Puertos Host To IP Enumeración de...
ios-nehelper-enum-apps-0day
nehelper enumerate installed apps 0-day iOS 15.0 I've updated this code to avoid using Private API directly. Read more in my blog post. However, that means that now this code is iOS version-specific and possibly device model-specific. So if it doesn't work on your device, recalculate and update t...
ios-gamed-0day
iOS gamed exploit fixed in 15.0.2 Update: Apple has quietly fixed this in iOS 15.0.2 without any kind of public acknowledgement or credit. Any app installed from the App Store may access the following data without any prompt from the user: Apple ID email and full name associated with it Apple ID...
pentaho-exploits
Exploits relating to https://research.aurainfosec.io/pentest/pentah0wnage Note: Some things might not work Thanks to my employer Aura Information Security for providing time for me to work on this project...
CVE-2024-28987
CVE-2024-28987 - SolarWinds Web Help Desk Hardcoded Credentials Exploit ⚠️ DISCLAIMER: This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. Use this tool only on systems you own or have explicit permission to test. 📋...
CVE-2026-42533-nginx
CVE-2026-42533 nginx This repository contains a Go-based scanner for identifying nginx configuration patterns associated with the complexvalue two-pass capture-clobbering issue described in CVE-2026-42533. Overview The tool analyzes nginx configuration files and directories to detect risky...
CVE-2026-63203 Logto: Account API can disclose stored third-party provider tokens without the identities scope
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens.ts allow a caller holding a same-user access token with only the openid scope to retrieve stored social or enterpris...
