RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

RootQuest CTF Box — Multi-Stage Exploitation VM 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II Overview RootQuest is a purpose-built CTF virtual machine that contains a 10-stage , sequential attack path spanning 5 security domains. Each challenge...

CVE-2025-5304

CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation 🚀 PT Project Notebooks ≤ 1.1.3 — Unauthenticated Privilege Escalation CVE-2025-5304 PoC & exploit helper for PT Project Notebooks versions 1.0.0–1.1.3 : Missing authorization in...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth XSS → RCE exploit chain, based on research by pwn.ai published on ionsec.io. ⚠️ LEGAL WARNING : For EDUCATIONAL PURPOSES and AUTHORIZED TESTING only. Only use against systems you own or have explicit written permission to test. Lab Verification...

xwiki-cve-2025-24893

XWiki SolrSearch Unauthenticated RCE CVE-2025-24893 Contributors White Hat School 4th Cohort, Class 25 임두연@endusdksla Summary XWiki interprets wiki syntax and macros on the server side and renders them. The issue is that the Main.SolrSearch page is open to guests, yet it evaluates the user input...

mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C901 implementation of ML-KEM2. It is a fork of the ML-KEM reference implementation3. All C code in mlkem/src/ and mlkem/src/fips202/ is proved memory-safe no memory overflow and type-safe no integer overflow using CBMC4. All AArch64 and...

Exploit for CVE-2021-3030

CVE-2021-3030 — Cute Editor 6.4 Reflected Cross-Site Scripting...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Obfuscate & Virtualize PowerShell Code PowerShell Pro Obfuscator protects proprietary .ps1 scripts with renaming, polymorphic string and integer encryption, control-flow flattening, finite-state automata FSA, a VM engine, self-defending integrity checks, a protection...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053289 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory Ignore nCR34:0 when loading PDPTEs from...

Debian dsa-6486 : libde265-0 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6486 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6486-1 [email protected] https://www.debian.org/securit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053443 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053262 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use scratch field in MMIO fragment to hold small write values When exiting to userspace...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053428 advisory. In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one devic...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053214)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053214 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also...

PT-2026-86504

The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...

PT-2026-86485

🚨 CVE-2026-84219 The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then runs in the session of anyone viewing a page that displays it, including an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053206)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053206 advisory. In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in freepages When we upgraded our kernel, we started...

PT-2026-86484

The Bold Page Builder WordPress plugin before 5.9.9 does not sanitise and escape a shortcode attribute before outputting it in an HTML attribute, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user views the affected page...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073352 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053218 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053250)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053250 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcprtodeltaus We have some machines running stock Ubuntu 20.04.6...