Serein

Serein | In the Dusk of Rain | Project Updates Suspended Linux English version is online! | Linux English Version is Now Available! http://github.com/W01fh4cker/SereinLinux Disclaimer | Declaration This project is for authorized use only. Any illegal operations using this project are strictly...

FULL-SPLOIT-FOR-MVID-2021-0359

FULL-SPLOIT-FOR-MVID-2021-0359 nday for MVID-2021-0359...

CVE-2026-41044

CVE-2026-41044 注記: 教育目的のみ アドバイザリからRCAまで半日で: AIがN-day分析をどう加速させるか Apache ActiveMQのCVE-2026-41044を、パッチ適用前後の正確なコードを使って解説する、短くて正直なウォークスルー CVE-2026-41044は2026年4月24日に公開されました。これはApache ActiveMQ Classicのリモートコード実行バグで、jsjcwによって発見され、5.19.6と6.2.5でパッチが適用されました。私が発見したわけではありません。...

CVE-2026-16723

CVE-2026-16723 This is N-day patch we releasing by testing our model capabilities...

nCentralDumpsterDiver

SolarWinds n-Central Dumpster Diver Description / Explanation FIXES/WORKAROUNDS have been released for more information: https://vulners.com/cve/CVE-2020-7984 This application utilizes the nCentral agent dot net libraries to simulate the agent registration and pull the agent/appliance configurati...

CVE-Reverse

Reverse N Days!!! Just to keep track of all the CVE we find & reverse, should have done it way earlier xD...

CVE-2018-6574

Code n stuff...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...

CVE-2021-41081

CVE-2021-41081 N-DAY VULNERABILITY RESEARCH FROM PATCH TO EXPLOIT ANALYSIS OF CVE-2021-41081 For technical details visit the blog post Technical Analysis of CVE-2021-41081 Best Regards, Sudu...

AlmaLinux 9.2 [TuxCare] Security Update: java-17-openjdk / java-17-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1753730595)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753730595 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE componen...

Rocky Linux 8 [CIQ] Security Update: harfbuzz / harfbuzz-debuginfo / harfbuzz-debugsource / etc (crlsa-2024_2980)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242980 advisory. harfbuzz: allows attackers to trigger On^2 growth via consecutive marks CVE-2023-25193 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: harfbuzz / harfbuzz-debuginfo / harfbuzz-debugsource / etc (crlsa-2024_2410)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242410 advisory. harfbuzz: allows attackers to trigger On^2 growth via consecutive marks CVE-2023-25193 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.2 [TuxCare] Security Update: harfbuzz / harfbuzz-devel / harfbuzz-icu (ALMALINUX9.2:CLSA-2025:1745945560)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745945560 advisory. - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of...

CVE-2026-86218

CVE-2026-86218 - N-able N-central Pre-Auth RCE Exploit Overview This is a Python 3 proof-of-concept exploit for CVE-2026-86218, a critical pre-authentication remote code execution vulnerability in N-able N-central. Vulnerability Details: CVE: CVE-2026-86218 CVSS Score: 10.0 Critical CWE: CWE-96...

Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)

Summary nodemailer/lib/addressparser parses one shape of address in On^2 time. A single 640 KB address value blocks the Node.js event loop for roughly 7 seconds. And it is reachable without auth: mailparser feeds inbound email headers straight into this parser, so one crafted email is enough to...

CentOS Linux 7 [TuxCare] Security Update: harfbuzz / harfbuzz-devel / harfbuzz-icu (CENTOS7:CLSA-2024:1723795896)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1723795896 advisory. - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking...

hdf5: HDF5: Denial of service via crafted HDF5 file

A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...

CVE-2026-42772 Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC pee...

CVE-2026-42772 Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC pee...

CVE-2026-42772 Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC pee...