CVE-2025-5964-

CVE‑2025‑5964 Path Traversal PoC para M‑Files Autor: Byte Reaper Telegram: @ByteReaper0 Resumen Este repositorio contiene una Prueba de Concepto PoC en C para una supuesta vulnerabilidad de Path Traversal en M‑Files versión 25.6.14925.0. La PoC archivo exploit.c intenta leer archivos sensibles po...

M-Botnet

M-Botnet Disclaimer1: This tool is used for educational purposes ONLY! Disclaimer2: I wrote this a long time ago, so do not judge my coding skills :D A basic botnet project. It's a C2 that controls a worm. The worm can self-propagate to spread around the network using MS17-010 vuln. To defeat thi...

cve-2026-25676

CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...

security-portfolio

Skyler M. — Security Portfolio IT Infrastructure & Security Engineer · Offensive security · Detection engineering · Vendor risk USMC veteran · Sole IT & security owner for a 200-user firm across 23 states · Top 2% on TryHackMe LinkedIn · GitHub @Mitsu-bis · HackerOne · TryHackMe · Resume I'm a US...

CVE-2021-33959

CVE-2021-33959 It can be seen that Plex service listens to the four udp ports 32410, 32412, 32413 and 32414. Through the analysis of the attack payload and using the message format of the device query request for reference, we write software to send udp packets with the attack payload of M-SEARCH...

CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Prueba de Concepto Un registro rápido de algo que he estado probando recientemente. root@kitploit: !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' ...

EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2026-3448)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...

CVE-2026-90278

In the Linux kernel, the following vulnerability has been resolved: md: wait for behind writes before destroying bitmap mdstop destroyed the bitmap before calling mddevdetach. That made mddevdetach skip bitmapops-waitbehindwrites, because the bitmap was already disconnected from mddev. This was...

CVE-2026-90238

In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: fix self-deadlock in isp4sdpwronandinit error path isp4sdpwronandinit holds opsmutex via guardmutex and, on any init failure, jumps to errdeinit and calls isp4sdpwroffanddeinit. That helper takes the same...

UBUNTU-CVE-2026-90291

In the Linux kernel, the following vulnerability has been resolved: module/dups: Fix use-after-free in kmoddupreq lifetime handling The kmod dups code uses RCU to ensure that a kmoddupreq instance is freed only after it is no longer referenced. When releasing an instance, the kmodduprequestdelete...

CVE-2026-93051

In the Linux kernel, the following vulnerability has been resolved: misc: ad525xdpot: use driver core groups for sysfs files addpotprobe creates per-RDAC sysfs files manually and then optionally creates the command sysfs group. This leaves probe responsible for rolling back partial sysfs state an...

CVE-2026-90405

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-90383

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90004

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in applyminnrregions damonapplyminnrregions repeatedly split each region until its size becomes small enough to meet the user-defined low limit of the number of regions. The loop assumes...

CVE-2026-90046

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

CVE-2026-77853

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...

CVE-2026-77853

CVE-2026-77853 is an OS Command Injection vulnerability in LiteOn FlexFi products FF-RFI079I4 and FF-RFI078I4 . An authenticated user with access to the M-Plane (NETCONF) interface can execute arbitrary operating system commands, leading to high impact on confidentiality , integrity , and availab...

CVE-2026-77853

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...

EUVD-2026-78332

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...

Multiple vulnerabilities in Lite-On O-RU "FF-RFI079I4" and "FF-RFI078I4"

Overview O-RU "FF-RFI079I4" and "FF-RFI078I4" provided by LITE-ON Technology Corporation contain multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2026-77853 Hidden Functionality CWE-912 - CVE-2026-80217 Yuto Aono, Yutaro Osako, and Shunsuke Saruwatari of The University of...