CVE-2022-20186_CTXZ

CVE-2022-20186 漏洞利用 详细分析可在此处找到：here。这是 Arm Mali 内核驱动程序中的一个漏洞，我于 2022 年 1 月提交报告。该漏洞可用于从未受信任的应用域获得任意内核代码执行权限，进而禁用 SELinux 并获取 root 权限。 该漏洞利用已在 Google Pixel 6 上测试，支持从 2021 年 11 月到 2022 年 2 月的补丁级别。通过更改几个镜像偏移量，可以轻松添加对其他固件的支持。作为参考，我使用以下命令在 ndk-21 中通过 clang 编译： root@kitploit:...

GhostESP v2.1.2-pre2

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

Log4jPatcher

Log4jPatcher A Java Agent based mitigation for Log4j2 JNDI exploits. This agent employs 2 patches: Disabling all Lookup conversions on supported Log4j versions in org.apache.logging.log4j.core.pattern.MessagePatternConverter by setting noLookups to true in the constructor. Disabling the...

CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...

SUSE CVE-2026-72196

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copylcns dp-pagelcns index in analysis pass In logreplay's analysis pass, after finddp returns a valid DIRPAGEENTRY for the targetattr, targetvcn tuple, the copylcns block walks lrh-lcnsfollow further entries: t16...

CVE-2026-82807

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...

Moderate: Red Hat Security Advisory: gzip security update

An update for gzip is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

WordPress Live Composer plugin <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'dslccustomfield' Shortcode vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Page Builder: Live Composer versions = 2.1.19...

WordPress Live Composer plugin <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'customid' Shortcode Attribute vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin Page Builder: Live Composer versions = 2.1.19...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required, as the target must open a malicious TIF Tagged Image File Format file or visit a malicious page. The issue stems from improper validation of...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

Important: Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

EUVD-2026-68653

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...

CVE-2026-82807 ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...