CVE-2022-30190-NSIS

MSDT Patcher, a.k.a. CVE-2022-30190-NSIS This is an NSIS script that helps deploy and roll back the mitigation registry patch for CVE-2022-30190 as recommended by Microsoft. Download the executable here. How does it work? When run, it checks for the presence of the key HKCR\ms-msdt. If the key...

CVE-2018-10732

CVE-2018-10732 Exploit-DB publication at: No disclosure! Dataiku vendor Patch and Credits: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity Author Alex Hernandez aka @alt3kx...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2010-3971-hotpatch

CVE-2010-3971-hotpatch Do you own security hotfix with Deviare. Original article: using Deviare to create a temporary zero day patch...

Important: Red Hat Security Advisory: flatpak-builder security update

An update for flatpak-builder is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

EUVD-2026-97643

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

CVE-2026-109341

SurrealDB versions prior to 3.3.0 are vulnerable to an authorization bypass that allows users with table-level write permissions to access SELECT-restricted fields . The root cause is the resolution of JSON Patch pointers against an unreduced record, which can be exploited to copy hidden fields i...

ROOT-APP-PYPI-CVE-2026-54060 CVE-2026-54060 in pillow - Patched by Root

Root has patched CVE-2026-54060 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59198 CVE-2026-59198 in pillow - Patched by Root

Root has patched CVE-2026-59198 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-55380 CVE-2026-55380 in pillow - Patched by Root

Root has patched CVE-2026-55380 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59205 CVE-2026-59205 in pillow - Patched by Root

Root has patched CVE-2026-59205 in the pillow package for Root:PyPI. Multiple fixed versions available...

CVE-2022-39197-fix_patch

CVE-2022-39197-fixpatch Usage Add parameters when starting cobaltstrike -javaagent:fixXss-1.0-SNAPSHOT.jar...

SpringBreakVulnerableApp

Spring Break Vulnerable Application This is a vulnerable application to test the exploit for the Spring Break vulnerability CVE-2017-8046. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up and sheltered environment su...

CVE-2020-8209

Usage and Disclaimer This script is a batch detection script for the Citrix XenMobile directory traversal vulnerability CVE-2020-8209. Usage: Python CVE-2020-8209-Multiple.py url.txt The vulnerable addresses are output in vul.txt Affected Versions: Citrix XenMobile Server 10.12 before RP2 Citrix...

CVE-2026-67276

CVE-2026-67276 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

CVE-2026-108951

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...

itscape

ITScape — Linux KVM/arm64 guest-to-host escape tracking site Source for the ITScape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/arm64 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...

pintheft

PinTheft — RDS zerocopy double-free LPE tracking site Source for the PinTheft patch-status tracker: a single-page site recording which distributions have shipped a fix for the RDS zerocopy double-free privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE ID...

ROOT-APP-MAVEN-AIKIDO-2026-11158 AIKIDO-2026-11158 in org.springframework:spring-core - Patched by Root

Root has patched AIKIDO-2026-11158 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...

cifswitch

CIFSwitch — CIFS cifs.spnego key-origin LPE tracking site Source for the CIFSwitch patch-status tracker: a single-page site recording which distributions have shipped a fix for the CIFS cifs.spnego key-origin privilege escalation in the Linux kernel. Where the facts live Everything about the bug ...