pintheft

PinTheft — RDS zerocopy double-free LPE 추적 사이트 PinTheft 패치 상태 추적기의 소스: 리눅스 커널의 RDS zerocopy double-free 권한 상승에 대한 수정본을 어떤 배포판이 배포했는지 기록하는 단일 페이지 사이트입니다. 사실이 정리된 곳 버그에 관한 모든 것CVE ID, 영향받는 버전 및 수정 버전, 업스트림 수정 커밋, 발견 및 공개 크레딧, 최종 배포판별 패치 상태은 이 README가 아닌 추적기 페이지에 속합니다: 렌더링 결과:...

WuppieFuzz v1.7.1

WuppieFuzz v1.7.1 TNO developed WuppieFuzz, a coverage-guided REST API fuzzer developed on top of LibAFL, targeting a wide audience of end-users, with a strong focus on ease-of-use, explainability of the discovered flaws and modularity. WuppieFuzz supports all three settings of testing black box,...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Dirty Frag — доказательство концепции локального повышения привилегий ⚡ 📖 Описание Этот репозиторий содержит доказательство концепции PoC для: CVE-2026-43284 — Dirty Frag Эксплойт демонстрирует уязвимость, затрагивающую уязвимые системы Linux. 🧠 О Dirty Frag Dirt...

Hacking-Tools — Updated!

Hacking Tools A curated list of penetration testing and ethical hacking tools, organized by category. This collection includes Kali Linux tools and other notable utilities. Supporters .png?raw=true Table of Contents 🔍 Information Gathering 🔎 Vulnerability Analysis 💥 Exploitation Tools 📡 Wireless...

telerik-scanner-CVE-2019-18935

Telerik CVE-2019-18935 Vulnerability Scanner A Python-based security scanner designed to detect the Telerik UI for ASP.NET AJAX Remote Code Execution vulnerability CVE-2019-18935. 🚨 Vulnerability Details CVE : CVE-2019-18935 Risk Level : HIGH CWE : CWE-913 CVSS : 9.8 Critical Description Telerik ...

CVE-2026-81636

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashgraphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.querycomplexity/3 multiplies child complexity by...

[SECURITY] [DSA 6479-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6479-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 30, 2026 https://www.debian.org/security/faq -...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Обход аутентификации / некорректное управление доступом в PerfexCRM...

CVE-2024-9707

CVE-2024-9707 Hunk Companion = 1.8.4 - Absence d'autorisation pour l'installation/activation arbitraire de plugins non authentifiés Description Le plugin Hunk Companion pour WordPress est vulnérable à l'installation/activation non autorisée de plugins en raison d'un manque de vérification des...

[SECURITY] [DSA 6478-1] starlette security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6478-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 30, 2026 https://www.debian.org/security/faq -...

pmg v0.27.0

Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody...

Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

Bludit Bruteforce Mitigation Bypass Script Overview This script is a refurbished Bash implementation of an exploit targeting the Bludit CMS version = 3.9.2. It leverages a vulnerability CVE-2019-17240 that allows brute-forcing passwords by bypassing the CSRF token-based protection. The original...

[SECURITY] [DLA 4761-1] libnet-dns-perl security update

Debian LTS Advisory DLA-4761-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 30, 2026 https://wiki.debian.org/LTS Package : libnet-dns-perl Version : 1.29-1+deb11u1 1.36-1+deb12u1 CVE ID : CVE-2026-64194 Debian Bug : 1142503 Steffen Ullrich discovered that...

CVE-2025-65672

CVE-2025-65672 Référence directe d'objet non sécurisée IDOR dans classroomio 0.1.13 permet un accès non autorisé aux paramètres de partage et d'invitation des cours. Produit concerné : ClassroomIO Version affectée : 0.1.13 Découverte par : Rivek Raj Tamang RivuDon, Sikkim, Inde Détails de la...

CVE-2026-1337

CVE-2026-1337 - Neo4j - Внедрение в журнал Внедрение в журнал аутентифицированным пользователем возможно в query.log Neo4j, когда Neo4j не настроен на использование JSON-формата. Краткое описание Neo4j не экранирует управляющие символы в поле metadata транзакции Bolt. Аутентифицированный...

CVE-2020-17456

Description On August 21, 2020, seown SLC 130 router was exposed to have an authentication rce vulnerability. The vulnerability number is cve-2020-17456. The vulnerability is due to the ping command injection in the router's Web service diagnosis function. Combined with several groups of hard cod...

CVE-2026-81636 Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashgraphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.querycomplexity/3 multiplies child complexity by...

EUVD-2026-68286

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashgraphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.querycomplexity/3 multiplies child complexity by...

CVE-2026-81636 Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashgraphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.querycomplexity/3 multiplies child complexity by...

CVE-2026-81636 Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashgraphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.querycomplexity/3 multiplies child complexity by...