EUVD-2026-80069

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...

openssl security update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...

CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider OAuth Auth Bypass → DAG RCE Authentication bypass in Apache Airflow's FAB auth-manager provider apache-airflow-providers-fab, leading to remote code execution via a triggered DAG. The provider decodes the Azure OAuthidtoken with signature verification...

KsDumper-11

KsDumper-11 https://github.com/mastercodeon314/KsDumper-11/assets/78676320/9452970c-27cf-44df-b091-0d18a07937e5 Whats new v1.3.4 Added new feature Anti Anti Debugging Tools Detection Randomized MainWindow Title, most Control Titles, and the exe file name during runtime The process name is reverte...

CVE-2026-49254

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4, manager/router/router.go registers GET /api/v1/oauth and GET /api/v1/oauth/:id without jwt.MiddlewareFunc or RBAC, while manager/handlers/oauth.go returns models.Oauth records and...

CVE-2026-91786

A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing oversized icon...

CVE-2026-28576-poc

CVE-2026-28576: Inyección SQL en el Contacts Provider de Android Un contacto seleccionado, todos los contactos: una puerta de compatibilidad targetSdk convierte una concesión de selección de un solo contacto en un volcado completo de la base de datos de contactos. Android 17 reforzó el Contacts...

CVE-2025-10184_PoC

APK Build for CVE‑2025‑10184 PoC 这是一个 CVE‑2025‑10184 的 PoC 的 APK 构建 该漏洞存在于 com..providers.telephony 中, 允许任意应用在未获得 SMS 读取权限的情况下读取短信 源码 此源码及更多细节可见 Rapid7 的文章： https://www.rapid7.com/blog/post/cve-2025-10184-oneplus-oxygenos-telephony-provider-permission-bypass-not-fixed/ 下载 请登录后在 Actions 下载 未签名 的安装...

CVE-2021-38647

CVE-2021-38647 CVE-2021-38647 - 用于在 Azure UNIX/Linux VM 上利用未认证 RCE OMIGOD 的 POC 详情 在 Microsoft Azure 中，当为 UNIX/Linux VM 使用 Azure 自动化账户、更新管理、日志分析、配置管理等服务时，OMI 应用程序会自动安装。如果使用配置管理服务远程管理机器，OMI 应用程序还会在端口 5986 上暴露服务。 任何能够访问易受攻击端点的网络用户，无需 Authorization 头即可发送请求，利用 SCXcore 提供程序，在目标机器上以 root 权限执行操作系统命令！...

AOSP-DownloadProviderDbDumper

AOSP-DownloadProviderDbDumper PoC 利用 Android 下载提供程序中的 SQL 注入漏洞（CVE-2018-9493） 安全公告 https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-SQL-Injection-CVE-2018-9493.pdf 更多信息...

dtrace-memaccess_cve-2020-27949

Reading and writing memory of other processes using fasttrap The /dev/fasttrap device for creating trap nodes in user-space processes for the pid and objc providers has the permissions 666. In contrast to /dev/dtrace, which is also 666, fasttrap lacks a permission check. This allows any process t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: For clk: imx: clk-imx8mp, the error handling in imx8mpclocksprobe has been improved. ofiomap and kzalloc have been replaced with devmofiomap and devmkzalloc. This allows for automatic release of the associated memory when the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/shtmu: Always leave the device running after a probe. The TMU device can be used both as a clocksource and as a clockevent provider. The driver attempts to manage its own power state and clock settings—turning...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: scmi: Fixed the issue of a memory leak caused by the failure to remove generic power domains when the ofgenpdaddprovideronecell function fails during probing. If the ofgenpdaddprovideronecell function fails during...

Astra Linux – Vulnerability in Zabbix

Currently, the geomap configuration Administration - General - Geographical maps allows the use of HTML in the “Attribution text” field when the “Other” Tile provider is selected...

CVE-2026-21391 Improper Claim Validation in PingAM OIDC Provider

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

CVE-2026-21391

CVE-2026-21391 affects PingAM 's OIDC provider, where an improper validation of ID Token claims allows a well-crafted request to set or override arbitrary or protected claims. In certain configurations, this enables an attacker to bypass authentication controls via spoofing , leading to privilege...

CVE-2025-56819

CVE-2025-56819 Un problema en Datart v.1.0.0-rc.3 permite a un atacante remoto ejecutar código arbitrario mediante el parámetro de conexión INIT. root@kitploit: POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name":...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal y Escritura Arbitraria de Archivos Autenticado Este repositorio contiene una prueba de concepto PoC para el exploit CVE-2026-6815, una vulnerabilidad de escritura arbitraria de archivos y path traversal en Casdoor. La vulnerabilidad ha sido...

Oracle Linux 10 : ELSA-2026-67154-0: / openssl (ELSA-2026-671540)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671540 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...