holos

Docker compose for KVM. Define multi-VM stacks in one YAML file. No libvirt, no XML, no distributed control plane. Website and docs: https://zeroecco.github.io/holos/ The primitive is a VM, not a container. Every workload instance gets its own kernel boundary, qcow2 overlay, cloud-init seed, and...

EPScalate

EPScalate An elevation of privilege vulnerability in QuickHeal's Seqrite Enterprise Endpoint Security Solution EPS. The vulnerability has been assigned a CVE ID of CVE-2023-31497. https://user-images.githubusercontent.com/39941993/230790056-87157751-b96c-49a6-81df-bf3126acfbd6.mp4 Vendor and...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 1. Summary Reference: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 is a relational database management system that provides the ability to directly compile and execute Java code within its SQL engine. The H2 driver parses the JDBC URL to establish a connection...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

CVE-2023-25355-25356

Exploit and credits The exploit was found by [email protected] and is presented both in two amazing pieces: full disclosure article DEFCON31 slides A repo to automate even more this vulnerability has been published by Alex Linov: https://github.com/AlexLinov/sipXcom-RCE Objective The...

f_hid-4.14-backports

fhid backports for Linux 4.14.190 SM-A525F Three fixes to drivers/usb/gadget/function/fhid.c, carried by hand to a 4.14.190 Android vendor kernel and verified on the device they run on. 4.14 is end-of-life. No stable backport exists for any of these, and none is coming. That is the whole reason...

CVE-2026-33725

CVE-2026-33725 A proof-of-concept exploit for CVE-2026-33725, a Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import in Metabase. Vulnerable Versions Metabase Enterprise ≥ v1.47 and v1.54.22 Metabase Enterprise ≥ v1.54.0 and v1.54.22 Metabase...

Malicious code in @test-org-aczxvz/test-package (npm)

Source: amazon-inspector d0a9285b847a00a2be7c55862b4f73a961f349398d59de62cfba69be972a5089 The package's public initoptions API serializes the entire options object — including the HMAC signing key passed as loggingdata, the bearer token, region, instance, and entropy fields — and POSTs it to a...

witchcraft

Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual What it's about? WitchcraftFEX Are much more than a simple hacking script, is a cyberdeck toolkit built for runners who dive deep into the net. A shell and automation's and automation's engine for pentesting,...

CVE-2025-32463_PoC

CVE-2025-32463 NVD CVE-2025-32463 In most cases, GCC is not installed by default on target servers. This proof of concept provides a precompiled version to ensure it can be executed immediately on affected systems. Usage 1. Compile the woot1337.c file: gcc -shared -fPIC -Wl,-init,woot -o...

cve-2026-41042

CVE-2026-41042: Apache Gravitino 1.2.1 Unauthenticated RCE Self-contained, stdlib-only proof of concept for CVE-2026-41042: unauthenticated remote code execution in Apache Gravitino before 1.2.1 via the H2 JDBC INIT connection setting. No auth headers, no extra drivers, no pip installs. python3...

CVE-2025-56819

CVE-2025-56819 An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter. POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type": "JDBC",...

CVE-2026-70642

ToolJet before 3.21.94, fixed in commit e5f387a, contains an authorization bypass vulnerability in the app environments init endpoint that allows authenticated users to read app version metadata belonging to other workspaces. Attackers can send GET requests to /api/app-environments/init with an...

CVE-2026-70642 ToolJet < 3.21.94 Authorization Bypass via app-environments/init

ToolJet before 3.21.94, fixed in commit e5f387a, contains an authorization bypass vulnerability in the app environments init endpoint that allows authenticated users to read app version metadata belonging to other workspaces. Attackers can send GET requests to /api/app-environments/init with an...

EUVD-2026-124531

ToolJet before 3.21.94, fixed in commit e5f387a, contains an authorization bypass vulnerability in the app environments init endpoint that allows authenticated users to read app version metadata belonging to other workspaces. Attackers can send GET requests to /api/app-environments/init with an...

CVE-2026-70642

ToolsJet versions before 3.21.94 are vulnerable to an authorization bypass in the /api/app-environments/init endpoint. Because the lookup for editing_version_id is not scoped to the caller's organization, authenticated users can retrieve app version metadata—including version name, description, s...

CVE-2023-34468-PoC

CVE-2023-34468 PoC for Apache NiFi Educational proof-of-concept PoC for CVE-2023-34468 affecting Apache NiFi versions prior to 1.22.0. This repository demonstrates how abuse of H2 JDBC URL configuration can lead to authenticated remote code execution RCE in vulnerable Apache NiFi installations...

CVE-2025-24132-Scanner

EN | KR 📄 Overview This tool discovers AirPlay-capable devices on your local network via mDNS Zeroconf and tests them for the CVE-2025-24132 “zero-click” HTTP RCE vulnerability. Discovered devices are listed in a simple GUI; click a device to view all retrieved properties. Prerequisites Python 3....

CVE-2026-122247

Description Summary On a self-hosted, single-tenant Budibase instance "multiTenancy:false", the public bootstrap endpoint "POST /api/global/users/init" remains fully exploitable after the instance has been provisioned. Its "already initialised" guard "checkAnyUserExists" is evaluated inside a...

PT-2026-141771

A out-of-bounds read vulnerability exists in the dr mp3 drmp3 init internal functionality of dr libs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...