CVE-2026-47542

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...

CVE-2026-47522

A flaw was found in the NVIDIA GPU display driver. Improper input validation within the kernel mode layer allows an authenticated local attacker with elevated privileges to trigger unintended behavior. A successful exploit may lead to arbitrary code execution, denial of service DoS, privilege...

CVE-2026-47492

A flaw was found in the NVIDIA GPU Display Driver. Due to improper access control in the kernel mode layer, an authenticated local attacker can exploit this vulnerability to cause a Denial of Service DoS, resulting in system instability or driver disruption...

CVE-2026-31431

copy.fail — примитив AFALG AEAD splice CVE-2026-31431 Обзор Этот проект представляет собой порт на C оригинального прототипа на Python, созданного offsecguy. Он использует криптографический API ядра Linux AFALG с применением: режима AEAD authencesnhmacsha256,cbcaes флага MSGMORE системного вызова...

kafka-keycloak-oauth

Apache Kafka 4.1.0 с аутентификацией Keycloak OAuth2 Production-ready Apache Kafka 4.1.0 режим KRaft с аутентификацией Keycloak 26.1.1 OAuth2/OIDC с использованием образа Strimzi Kafka. Почему этот проект вместо kafka-oauth-keycloak-tls-demo Это эволюция предыдущего POC со значительными...

-CVE-2026-26215-manga-image-translator-RCE

CVE-2026-26215 - manga-image-translator Pickle-десериализация RCE 👤 Автор Mohammed Idrees Banyamer Instagram: @banyamersecurity GitHub: @mbanyamer Proof-of-Concept эксплойт для CVE-2026-26215 - Неаутентифицированное удалённое выполнение кода через небезопасную Pickle-десериализацию в...

CVE-2026-20805-POC

CVE-2026-20805 PoC Проверка концепции для уязвимости раскрытия информации в Desktop Windows Manager dwm.exe от Microsoft. 📋 Сводка уязвимости ID: CVE-2026-20805 Продукт: Microsoft Windows Компонент: Desktop Windows Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an Unauthoriz...

CVE-2026-47552

A flaw was found in nvidia-driver. An unprivileged local user can bypass an authorization check in the kernel mode layer to modify privileged configurations. Successful exploitation could allow an attacker to escalate privileges, execute arbitrary code, access sensitive information, or cause a...

CVE-2026-47563

A flaw was found in xorg-x11-drv-nvidia. A local user can trigger an invalid memory access NULL pointer dereference in the driver's kernel mode layer. A successful exploit could allow an attacker to execute arbitrary code with elevated system privileges, access sensitive information, or cause a...

CVE-2026-47519

A flaw was found in nvidia-vgpu-software's Virtual GPU vGPU Manager for Linux. A local user with basic privileges can trigger an out-of-bounds read in the kernel-mode driver, accessing memory outside designated boundaries. A successful exploit could allow the attacker to execute arbitrary code,...

CVE-2021-3129-Script

CVE-2021-3129 Laravel = v8.4.2 режим отладки: удалённое выполнение кода CVE-2021-3129 Использование： python3 exp.py http://127.0.0.1:8888 Try to use Laravel/RCE1 for exploitation. +exploit: Laravel/RCE1 Result: Try to use Laravel/RCE2 for exploitation. +exploit: Laravel/RCE2 Result: Try to use...

GHSA-J4PH-9XWF-WCJ4 SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering

Summary /api/attr/getBookmarkLabels is registered with CheckAuth only and applies no filtering of any kind. It runs a scan of the entire blocks table and returns the distinct set of every bookmark label in the workspace. An anonymous reader in publish mode receives the author's complete bookmark...

EUVD-2026-57813

SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering...

CVE-2026-17053

The SMBus driver API exposed smbussmbalertremovecb and smbushostnotifyremovecb as Zephyr syscalls. Their verifiers in drivers/smbus/smbushandlers.c validated only the dev argument with KSYSCALLOBJdev, KOBJDRIVERSMBUS and forwarded the caller-supplied struct smbuscallback cb pointer into kernel-mo...

laravel-8.4.2-rce

laravel-8.4.2-rce Настройка окружения git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve Использование python3 exploit.py http://pwnme.me:8000 /var/www/html/laravel/storage/logs/laravel.log...

zeek-openvpn

zeek::openvpn ================================= ЭТОТ ПРОЕКТ УСТАРЕЛ, ВМЕСТО НЕГО ИСПОЛЬЗУЙТЕ https://github.com/corelight/zeek-spicy-openvpn Плагин для обнаружения и разбора OpenVPN в следующих режимах: UDP с TLS UDP с TLS и TLS Auth TCP с TLS TCP с TLS и TLS Auth Пока что он не обнаруживает режи...

FreeMOCA

Траектория непрерывного обучения как память для консолидации без повторного воспроизведения при анализе вредоносного кода !NOTE Это официальная реализация статьи Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis. Конвейер FreeMOCA FreeMOCA работает...

CVE-2021-3129-Lab

CVE-2021-3129: Лаборатория RCE для режима отладки Laravel Практическая лаборатория для эксплуатации CVE-2021-3129 — критической уязвимости Laravel, позволяющей неавторизованное чтение файлов и потенциальное удалённое выполнение кода RCE. Быстрый старт Clone git clone...

CVE-2019-5420

CVE-2019-5420 PoC 개발 모드 Rails 5.2.2.1, 6.0.0.beta3의 원격 코드 실행 취약점으로, 공격자가 자동 생성된 개발 모드 시크릿 토큰을 추측할 수 있습니다. 이 시크릿 토큰은 다른 Rails 내부 요소와 결합하여 원격 코드 실행 익스플로잇으로 확대될 수 있습니다. CVE-2019-5420용 이 PoC 코드는 원격 코드 실행 자체 없이 권한을 관리자 계정으로 상승시킵니다. 사용 방법 쿠키 값을 복사하여 11번째 줄의 "VALUEOFTHECOOKIE"를 해당 값으로 교체하세요: cookie =...

CVE-2026-17053 SMBus callback-removal syscalls accept an unvalidated user pointer, letting user threads manipulate kernel callback state

The SMBus driver API exposed smbussmbalertremovecb and smbushostnotifyremovecb as Zephyr syscalls. Their verifiers in drivers/smbus/smbushandlers.c validated only the dev argument with KSYSCALLOBJdev, KOBJDRIVERSMBUS and forwarded the caller-supplied struct smbuscallback cb pointer into kernel-mo...