CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage git clone...

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...

CVE-2026-101274

When pretix is used as an identity provider in a Single-Sign-On (SSO) setup, the system fails to properly validate the response_type requested in an authorization request against the configured grant type of the SSO client. Specifically, a client configured to only allow the code response type co...

EUVD-2026-111998

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...

conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

CVE-2026-46331

🚨 CVE-2026-46331 - Linux Kernel COW Bug Linux Kernel net/sched Partial Copy-on-Write COW Page Cache Corruption -orange?style=for-the-badge A Linux kernel vulnerability caused by incorrect Copy-on-Write COW handling in the traffic control tc packet editing subsystem. 📖 Overview CVE-2026-46331 is a...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...

chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android

A flaw was found in ANGLE, a component within Google Chrome on Android. This out-of-bounds write vulnerability allows a remote attacker to potentially perform a sandbox escape by enticing a user to visit a specially crafted HTML page. This could lead to an attacker executing arbitrary code outsid...

sap_logon_ticket

saplogonticket General toolkit related to SAP's SSO mechanism : the Logon Tickets...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - SAML SSO bypass fofa: app="ZABBIX-监控系统" && body="saml"...

PoC-CVE-2026-46331

This repository contains a proof-of-concept PoC exploit for CVE-2026-46331, a Linux kernel local privilege escalation vulnerability in the traffic-control subsystem. Vulnerability Summary The flaw exists in the actpedit packet-editing action, where the kernel may calculate the copy-on-write...

CVE-2026-31431-C

Copy-Fail Exploit CVE-2026-31431 Local privilege escalation exploit targeting a Linux kernel copy-on-write vulnerability via AFALG sockets and splice operations. Overview This exploit abuses a kernel-level memory corruption condition in the Linux crypto subsystem AFALG combined with zero-copy...

SecOPD

SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation Yibo Peng · Long Lian · David Wagner† · Sizhe Chen† † Joint supervision. Paper Project page Model This release implements the paper's final full-response KL formulation, also described as the no-parsing variant. The student...

HydraDragonAV-Mobile

🐉 HydraDragonAV Mobile Advanced Android Antivirus With Threat Protection ⚠️ Project on hold. This project did not get enough interest, so I have paused it for a while. Development has moved to HydraDragonAntivirus. Discord Community Server: https://discord.gg/7XMCuj5mbP Logo made by discord user...

training-application-security

Free Secure Coding & Application Security Training — Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn — by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...

CVE-2026-104383

The EagleCloud Aquila on-premises version (versions through 2.6.7.2 ) contains a code injection vulnerability in the Pigeon MFA service . This flaw, identified as CWE-94 , occurs due to the Improper Control of Generation of Code , which allows authenticated remote attackers to execute arbitrary c...

sharepoint-toolshell-cve-2025-53770

SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overview CVE-2025-53770 is a critical remote code execution RCE vulnerability affecting Microsoft SharePoint Server 2016, 2019, and Subscription Edition on-premises only, not SharePoint Online. Attackers can bypass authentication and achieve full...

EUVD-2026-111549

LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host discards the OCSP URL scheme and httpalloc only selects TLS for port 443. On-path network attackers can read OCSP requests sent to https responder URLs on non-443 ports, exposing certificate serial...

CVE-2016-5195

CVE-2016-5195 DirtyCOW PoC Modified from dirtycow.github.ioc include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i 100000000; i++ c += madvisemap, 100, MADVDONTNEED;...

dh-CVE_2016_2098

== README Proof of concept for https://groups.google.com/forum/!topic/rubyonrails-security/ly-IH-fxrQ == Exploiting: 1. You should only run rails server in a way that you are certain will not open you up to being exploited 2. Run rails s 3. Execute the following command curl -v -H "Accept:...