Exploit for CVE-2026-102253

CVE-2026-102253-POC DOS infinite-loop Vulnerability POC Su...

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans RAT to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a...

ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

Summary When decoding a tiled TIFF with fax compression T4/T6/MH, DecodeTilesChunky allocates each tile buffer from TileWidth ceilTileWidthbpp/8TileLength bytes but constructs the fax decompressor with frame.Width: TiffDecompressorsFactory ignores the isTiled/tileWidth/tileHeight parameters...

GHSA-V76P-62QX-WWQ2 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

Summary When decoding a tiled TIFF with fax compression T4/T6/MH, DecodeTilesChunky allocates each tile buffer from TileWidth ceilTileWidthbpp/8TileLength bytes but constructs the fax decompressor with frame.Width: TiffDecompressorsFactory ignores the isTiled/tileWidth/tileHeight parameters...

Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

Description: Summary An IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass the "local-only" access restriction. By sending a spoofed X-Forwarded-For: 127.0.0.1...

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

Summary Flowise = 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist validatePythonCodeForDataFrame to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an extern...

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall...

Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Summary One unauthenticated request with a crafted User-Agent stalls a Quasar SSR server for seconds. Quasar auto-installs its Platform plugin on every server-side render, and Platform.parseSSR feeds the raw, unbounded User-Agent request header into a chain of backtracking regular expressions in...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

dnsx

Un toolkit DNS rápido y multipropósito diseñado para ejecutar consultas DNS Características • Instalación • Uso • Ejecutando dnsx • Wildcard • Notas • Únete a Discord dnsx es un toolkit DNS rápido y multipropósito diseñado para ejecutar diversas sondas a través de la librería retryabledns. Soport...

interrogate

Interrogate Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material regardless of target operating system, first and foremost for memory dump analysis and forensic usage. Able to identify AES, Serpent, Twofish and DER-encoded RSA keys as of version 0.0.4...

micr0_shell

micr0 shell Micr0shell es un script ligero y eficiente en Python diseñado para generar dinámicamente shellcode de reverse shell independiente de posición PIC libre de nulos para Windows X64. Dependiendo de las opciones seleccionadas, el shellcode generado puede ser hasta 27 bytes más pequeño que ...

CVE-2024-37791

CVE-2024-37791 CVE-2024-37791 Project address: Preparatory work: Log in to the backend - get cookie Vulnerability URL: http://127.0.0.1:8093/s/article/Content/index?classid=&keyword= Vulnerability parameter: keyword payload: %27andselectfromselect+ifasciisubstrdatabase,1,1%3E97,sleep1,0a//union/...

vuke

vuke Herramienta de investigación para analizar y reproducir la generación vulnerable de claves de Bitcoin. Características Arquitectura modular : fuentes y transformaciones conectables Múltiples fuentes de entrada Rangos numéricos probar semillas débiles Listas de palabras análisis de brainwalle...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 CVE-2024-0044 Exploit Script This Bash script demonstrates how to exploit CVE-2024-0044. For educational and testing purposes only. Prerequisites ADB Android Debug Bridge installed an...

hyperhives-macos-infostealer-analysis

HyperHives macOS Infostealer — Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...

CVE-2025-31131

CVE-2025-31131 - YesWiki 4.5.2 Path Traversal Exploit This is an unauthenticated path traversal exploit targeting YesWiki versions prior to 4.5.2. The vulnerability exists in the squelette parameter, which allows reading arbitrary files from the server. Vulnerability Details CVE-ID: CVE-2025-3113...