424797 matches found
CVE-2026-104117
A missing authorization check in the illumos IP management daemon (ipmgmtd ) allows an unprivileged local user to modify the persistent IP multipathing (IPMP) configuration. Specifically, the door dispatch table in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmt_door.c fails to require solaris.network.in...
CVE-2026-104117 Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership
A missing authorization check in the illumos IP management daemon ipmgmtd allows a local user to change the persistent IP multipathing IPMP configuration. The ipmgmtd door dispatch table in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c does not require the solaris.network.interface.config...
By-Poloss..-..CVE-2026-15038-POC
🚨 CVE-2026-15038 — InfiniteWP Client Admin Takeover Unauthenticated Admin Account Takeover in WordPress Multisite 📋 Overview InfiniteWP Client plugin for WordPress getoption'iwpclientactionmessageid' && !$iwpmmbcore-getoption'iwpclientpublickey' Reader : Uses getsiteoption → reads from...
intra-handshake-fail
Intra-handshake fail This is the working area for the individual Internet-Draft, "Intra-handshake fail". Editor's Copy Datatracker Page Individual Draft Compare Editor's Copy to Individual Draft Contributing See the guidelines for contributions. The contributing file also has tips on how to make...
CVE-2026-21858
CVE-2026-21858 RCE PoC environment for n8n 1.120.4 with a Form Trigger workflow and an exploit script. Requirements Docker Docker Desktop on Windows Python 3.x attack side Files Dockerfile — build the n8n vulnerable environment run.bat — run the container Windows workflow.txt — n8n workflow...
CVE-2026-35194
CVE-2026-35194 — Apache Flink SQL Code Injection Remote code execution on Apache Flink TaskManagers via SQL code generation injection. | ---|--- CVE| CVE-2026-35194 CVSS| 8.1 High CWE| CWE-94 — Code Injection Affected| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 Fixed| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1...
CVE-2025-32433-LAB
CVE-2025-32433 Vulnerability Research & Security Lab ✅ PRE-AUTH RCE CONFIRMED — Exploit successfully demonstrated. 📄 Technical Blog PDF : CVE-2025-32433-Technical-Blog.pdf 📸 Visual Evidence : screenshots/ 🔍 Proof of Concept Details : docs/PROOFOFCONCEPT.md CVE-2025-32433 is a CVSS 10.0 Critical...
file-notification-attacks
File Notification Attacks - Artifacts This repository contains the still in review! artifacts for the paper "File Notification Attacks: Templating and Exploiting Side-Channel Leakage from the File-Notification Systems on Linux, Windows, and macOS", accepted at CCS '26. Visit the website with demo...
RLCDAlignBench
Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures This repository holds RLCDAlignBench and the code behind the paper. The benchmark measures whether a detector can tell when a language model's output is an alignment failure. It has 44...
aegis-audio-defense
AEGIS: Audio Endogenous Guarding via Internal Signals Against Large Audio-Language Model Jailbreaks Submitted to ICASSP 2027. AEGIS keeps the target audio-language model frozen and adds a mid-layer risk gate that conditionally drives late-layer safety adapters, with closed-loop scaling at...
libprocesshider
libprocesshider Nascondi un processo sotto Linux usando il preloader ld. Tutorial completo disponibile su https://sysdigcloud.com/hiding-linux-processes-for-fun-and-profit/ In breve, compila la libreria: gianluca@sid:/libprocesshider$ make gcc -Wall -fPIC -shared -o libprocesshider.so...
findcdn
findcdn findcdn, is a tool that can scan and detect the kind of Content Distribution Network CDN a domain uses. findcdn can save results to a file, be used as a module, or just output to stdout. findcdn helps users of the tool accurately determine what CDN a domain is using. The list of supported...
cdn-ip-scanner
CDN IP Scanner V3.0 High Accuracy • Ultra Fast • Real-Time 🌐 Language: English | فارسی Install • Features • Usage • What's new • Developers • Donate 📚 Table of Contents 1. Overview 2. Features 3. Installation npm app Windows / macOS / Linux — step by step Android app Linux server Release files &...
waf-detector
WAF Detector CLI tool for detecting, testing, and profiling Web Application Firewalls WAFs and Content Delivery Networks CDNs. Important: Only test systems you own or have explicit authorization to test. For AI coding agents: See AGENTS.md for skill mapping and workflow pointers. Use...
CVE-2026-41940
CVE-2026-41940 - cPanel/WHM Auth Bypass Scanner & Exploit Tool cPanel/WHM Authentication Bypass Scanner & Exploit Tool for CVE-2026-41940 ⚠️ Disclaimer This tool is provided for educational purposes and authorized security testing only. By using this tool, you agree that: You will only test system...
CVE-2025-68493
CVE-2025-68493 CVE-2025-68493 7. References 1 Apache Struts XWork XML Vulnerability CVE-2025-68493 PoC and Script | ZONE.CI Global Network. https://zone.ci/secarticles/wx/486533.html 8. Vulnerability Verification and Exploitation To verify and exploit the CVE-2025-68493 vulnerability, you can use...
CVE-2025-15276-poc
CVE-2025-15276: FontForge SFD PickledData Insecure Deserialization RCE Disclaimer This Proof of Concept PoC is for educational purposes and security auditing only. The author is not responsible for any misuse of this information. Unauthorized access to computer systems is illegal. Always obtain...
CVE-2026-34197-Apache-ActiveMQ-RCE
Fixed the issue where the reverse shell failed because the command was not XML-escaped...
CVE-2025-69985
FUXA ≤ 1.2.8 Auth Bypass + RCE CVE-2025-69985 📜 Description This Python exploit targets CVE-2025-69985, a critical authentication bypass vulnerability in FUXA web-based SCADA/HMI software versions ≤ 1.2.8. By sending a crafted JSON payload with embedded Node.js code to the unprotected...