rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Buffer Overflow Vulnerability Overview In rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail:...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. Functionality and features The following features are built-in into Connection Manager: - Generic plugin infrastructure - Device and network abstraction with basic storage support - IPv4, IPv4-LL link-local and DHCP...

reproducer-poc-CVE-2022-0847

Naive detector and reproducer of CVE-2022-0847 dirty pipe. Uses simple generator of syscall sequences / programs from purposefully limited set of building blocks / input values only generation, no advanced fuzzing; no mutation; no coverage guidance; no shrinking / minimization and detects...

FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...

CVE-2017-1000486

CVE-2017-1000486 Exploit de ejecución remota de código para PrimeFaces 5.x - Inyección de EL CVE-2017-1000486 Básicamente es el mismo exploit creado por Mogwailabs, pero modificado para funcionar en entornos cerrados sin acceso a internet o con tráfico saliente bloqueado por el firewall. Te da lo...

jenkinsci__perfecto-plugin_CVE-2020-2261_1-17

Perfecto Jenkins Plugin Perfecto Jenkins Plugin provides the ability to auto-create/ re-use existing Perfecto Connect tunnel-id in build environment. Table of Contents Perfecto Jenkins Plugin Table of Contents Prerequisites 1. Steps to Enable the plugin Screenshots Mac Windows Advanced Options 2...

CVE-2022-2588

CVE-2022-2588 La corrección El error está corregido en Linux v5.19 mediante este commit. El error El error se introdujo en Linux v3.17 mediante este commit en 2014. Requiere User Namespaces para activarse. Este error es muy similar a CVE-2021-3715, causado por una operación incorrecta en la lista...

l4s-vulnapp

Log4Shell Vulnerable Applicationl4s-vulnapp This is a potentially vulnerable Java web application containing Log4j2.14.1 affected by log4shellCVE-2021-44228. Verified environment and various versions AdoptOpenJDK 17.0.10+7 Gradle 8.6 Gretty 4.1.2 Apache Tomcat 10.1.15 Apache Log4j Core 2.14.1...

CVE-2022-24086

CVE-2022-24086 Ejemplo de POC de CVE-2022-24086 proporcionado por BurpRoot CVE-2022-24086: Resumen Software afectado: Magento2 ID de CVE: CVE-2022-24086 Puntuación CVSS: 9.8 Crítico Descripción CVE-2022-24086 es una vulnerabilidad de seguridad crítica que afecta a múltiples versiones de la...

CVE-2020-10977.py

CVE-2020-10977.py authenticated arbitrary file read for Gitlab CVE-2020-10977 usage: CVE-2020-10977.py -h --verifySSL -f FILELIST host token Exploit for the gitlab local file inclusion arbitrary authenticated file read - CVE-2020-10977. modify the variable pullfiles to include all the files you...

CVE-2012-2593

Cadena de Explotación XSS-CSRF-RCE en Atmail PoC atmail-rce.py: Explota CVE-2012-2593 en la interfaz de webmail de Atmail. atmail-csrf.js: Archivo Javascript que aprovecha CVE 2012-2593 para convertirlo en un CSRF e instalar un plugin malicioso que ejecuta una reverse shell. Plugin.php: Plugin de...

sudotimewarp-cve-2026-96512-

SudoTimeWarp — CVE-2026-96512 sudo: the caller'sTZ decides NOTBEFORE/NOTAFTER Reproduction material for SudoTimeWarp CVE-2026-96512. A sudoers rule whose DateSpec timestamp omits the trailing Z is converted by mktime, which re-reads getenv"TZ" on every call. Because sudo is setuid-root and the...

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm — Sudo Project A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing Z timezone indicator, the...

spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: It was discovered that nfqueue holds the bridgeskb-dev variable while the packet is being queued. The function brpassFrameup reassigns skb-dev from the ingress port to the bridge master before queuing bridge...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/tls: The use-after-free issue in the -EBUSY error handling path of tlsdoencryption has been fixed. The -EBUSY handling in tlsdoencryption, introduced with commit 859054147318 “net: tls: handle backlogging of crypto requests”,...

spring-cloud__spring-cloud-config_CVE-2020-5405_2-1-6-RELEASE

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...

cve-2025-3248-exploit

CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability Scanner A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248 , a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0. 🔴 Vulnerability Overview CVE-2025-3248: Langfl...

Metasploitable2-VAPT-Report

VAPT Report: Metasploitable 2 System Compromise Project Overview This repository contains a comprehensive Vulnerability Assessment and Penetration Testing VAPT report for the Metasploitable 2 vulnerable environment. The assessment follows the standard 5-phase ethical hacking methodology,...

cve-2026-6471-postgres-logical-decoding-dlopen

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitrary library PostgreSQL logical decoding lets a non-superuser role that holds the REPLICATION privilege create a logical replication slot and choose the output plugin. On affected versions there is no authorization check on that choice,...