NVIDIA Windows GPU Display Driver Kernel Module Multiple Vulnerabilities (September 2026)

The NVIDIA GPU display driver software on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper...

Linux Distros Unpatched Vulnerability : CVE-2026-97876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while...

CVE-2026-104612: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2023-50564

CVE-2023-50564 How to use First setup a listener for the reverse shell. Terminal 1 nc -nlvp Execute the script which will attempt to install a pluck module sending the reverse shell back to us. Terminal 2 go run exploit.go -url -password -i -p...

Detect-CVE-2017-15361-TPM

Detect Trusted Platform Modules Vulnerable to CVE-2017-15361 This repository provides content for aiding DoD administrators in detecting systems that have an enabled Trusted Platform Module TPM that is vulnerable to CVE-2017-15361 and is a companion to Information Assurance Advisory RSA Key...

puppetlabs-cve20113872

CVE-2011-3872 Remediation Toolkit This module will help you permanently remediate the CVE-2011-3872 AltNames vulnerability. Usage Guides Please see the detailed usage guides at: README-detailed.markdown for remediating your site with Puppet README-ssh-only.markdown For remediating your site with...

ghostlock-app

GhostLock-App 中文: READMEZH.md Документация Руководство по портированию профилей ядра — добавление поддержки нового ядра. GhostLock сопоставляет ядра по точному uname -r и отклоняет неподдерживаемые сборки, отображая статус в верхней части. Встроенные профили находятся в...

CVE-2026-24416

CVE-2026-24416: OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module Overview Field| Details ---|--- CVE ID| CVE-2026-24416 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: = 2.9.8 CWE Classification...

fips203

NCC Group: FIPS 203 Module-Lattice-Based Key-Encapsulation Mechanism Standard FIPS 203 Initial Public Draft Module-Lattice-Based Key-Encapsulation Mechanism Standard written in pure Rust for server, desktop, browser and embedded applications. The source repository includes examples demonstrating...

rustproofing-linux

Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...

CVE-2025-38001

CVE-2025-38001---Linux-Kernel-HFSC-RBTree-Use-After-Free-Research This repository contains a Proof of Concept PoC for the CVE-2025-38001 security vulnerability that targets the HFSC module in the Linux Kernel. Created specifically as learning material for kernel memory corruption and security...

W0nTsEEMe

W0nTsEEMe simple keylogger using python written for ubuntu Requirements: keyboard module to get it: pip install keyboard Also it must be run as sudo Under construction.N0t finished yet...

CVE-2026-63642

SSRF в модуле календаря MagicMirror² Доказательство концепции эксплуатации для CVE-2026-63642 и CVE-2026-63643 — уязвимостей Server-Side Request Forgery в модуле Calendar MagicMirror², которые позволяют любому неаутентифицированному атакующему заставить сервер выполнять произвольные HTTP-запросы ...

ALLMediaServer-1.6-Buffer-Overflow

CVE-2022-28381 ALLMediaServer 1.6 Remote - Buffer Overflow SEH ALLMediaServer-1.6-Buffer-OverflowMetasploit Proof and Exploit References https://nvd.nist.gov/vuln/detail/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381...

CVE-2026-102667

Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...

GreyEnergy-Mini-Module-Malware-Analysis

GreyEnergy Mini Module Malware Analysis Turkish This research paper has already been published before and you can also find the original .pdf version at here...

-Pluck-CMS-RCE-CVE-2023-50564

exploit.py 🐍💥 ⚠️ Legal / ethical notice: this script is only for authorized environments ✅ CTFs, labs, pentesting with permission. Do not use it against systems without authorization ❌. 🧾 What does this script do? exploitgreenhorn.py automates a typical exploitation chain on a web panel: ✅ Logs...

CVE-2026-102667 Joyland AI WebView command injection

Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...

EUVD-2026-91025

Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...

CVE-2026-102667

The Joyland AI app is vulnerable to a JavaScript injection flaw in its WebView component, exploitable by an attacker with shared network access . The root cause allows unauthorized access to the clipboard , app-internal storage , and the ability to make arbitrary HTTP requests via the Weex 'strea...