Log4Shell-CVE-2021-44228-

Log4Shell CVE-2021-44228 - SOC Report Analysis Overview This repository contains a comprehensive Security Operations Center SOC analysis of Log4Shell CVE-2021-44228 , one of the most critical vulnerabilities discovered in 2021. The vulnerability affects the Apache Log4j logging library and poses ...

CVE-2025-32463-Sudo-Privilege-Escalation

CVE-2025-32463-Sudo-Privilege-Escalation ✔️ Completed on HackViser VIP Challenge This repository contains a working exploit for CVE-2025-32463 , a critical vulnerability CVSS 9.3 affecting sudo versions 1.9.14 → 1.9.17 that allows local privilege escalation to ROOT by abusing the --chroot -R...

ROOT-APP-NPM-CVE-2026-44580 CVE-2026-44580 in next - Patched by Root

Root has patched CVE-2026-44580 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10755 AIKIDO-2026-10755 in next - Patched by Root

Root has patched AIKIDO-2026-10755 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2024-10173 AIKIDO-2024-10173 in next - Patched by Root

Root has patched AIKIDO-2024-10173 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10758 AIKIDO-2026-10758 in next - Patched by Root

Root has patched AIKIDO-2026-10758 in the next package for Root:npm. Multiple fixed versions available...

CVE-2025-32463

La versión 1.9.17 de Sudo tiene una vulnerabilidad crítica CVE-2025-32463 que permite a usuarios locales obtener acceso root explotando la opción chroot, lo que puede conllevar graves riesgos de seguridad. Se recomienda a los usuarios actualizar a la versión 1.9.17p1 o posterior para mitigar este...

external_expact_AOSP10_r33_CVE-2022-25314

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

ROOT-APP-MAVEN-CVE-2022-1471 CVE-2022-1471 in org.yaml:snakeyaml - Patched by Root

Root has patched CVE-2022-1471 in the org.yaml:snakeyaml package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-25857 CVE-2022-25857 in org.yaml:snakeyaml - Patched by Root

Root has patched CVE-2022-25857 in the org.yaml:snakeyaml package for Root:Maven. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root

Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...

OSEC-2026-19 JOSE: missing RSA signature verification

The opam package "jose" does not validate any RSA signature. It checks the encoding being PKCS1, but does not verify with the public key. Reproduction With jose 0.10.0, the code below signs two tokens with the same key and glues one's payload onto the other's signature: OCaml let =...

CVE-2022-1592

CVE-2022-1592 POC root@kitploit: pip install requests --break-system-packages root@kitploit: CVE-2022-1592.py https://tatget.com/...

ROOT-APP-PYPI-CVE-2026-39892 CVE-2026-39892 in cryptography - Patched by Root

Root has patched CVE-2026-39892 in the cryptography package for Root:PyPI. Multiple fixed versions available...

DEBIAN-CVE-2026-44950

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice position, length lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the...

DEBIAN-CVE-2026-59679

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

USN-8742-1 netty vulnerability

It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attacks...

ROOT-APP-MAVEN-CVE-2023-34981 CVE-2023-34981 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2023-34981 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-55752 CVE-2025-55752 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-55752 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-68525 CVE-2026-68525 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-68525 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...