wch-ch56x-lib

wch-ch56x-lib Эта библиотека была создана вместе с Hydradancer — новым бэкендом для библиотеки эмуляции USB Facedancer на основе чипа WCH569. Для этого проекта требовались надёжные драйверы, а многие возможности в примерах WCH отсутствовали или не были протестированы. Эта библиотека предоставляет...

CVE-2025-8045

CVE-2025-8045 — Arm Mali GPU KCPU 큐 UAF CVE-2025-8045 , Arm Mali GPU 커널 드라이버kbase의 use-after-free 취약점에 대한 로컬 권한 상승 익스플로잇입니다. 비권한 로컬 프로세스가 CSF KCPU 큐 덤프 경로를 레이스하여 cpuqueue.buffer를 해제하고 다시 확보한 다음, 댕글링 할당을 자체가 소유한 페이지 테이블"dirty pagetable"로 바꾸고, 이 프리미티브를 사용하여 커널 물리 메모리 임의 읽기/쓰기를 얻습니다. 최종적으로 SELinux가...

dhcpoptinj

Инжектор опций DHCP Вам когда-нибудь хотелось перехватывать DHCP-запросы и незаметно для отправителя вставлять несколько дополнительных DHCP-опций? Скорее всего, нет. Однако, если такая необходимость возникнет, dhcpoptinj надеюсь вам поможет. Зачем Причин для изменения DHCP-запросов может быть...

ibm-qradar-ajp_smuggling_CVE-2022-26377_poc

CVE-2022-26377 Proof of Concept, разработанный командой @watchTowr для эксплуатации уязвимости AJP Smuggling с целью отравления очереди HTTP-ответов экземпляра IBM QRadar с помощью сохранённого перенаправления. Следите за исследовательской командой watchTowr Labs https://labs.watchtowr.com/...

CVE-2025-26466

CVE-2025-26466 poc для CVE-2025-26466 создано Fikret Can Gurbuz ИСПОЛЬЗОВАНИЕ root@kitploit: python3 poc.py -i -p Вот шаги: 1. TCP-подключение к порту 2. получить баннер сервера SSH-2.0-OpenSSHX.Xp1 3. отправьте свой клиентский баннер SSH-2.0-YourClient\r\n 4. отправьте wrapsshpacketbuildkexinit ...

apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ Apache RocketMQ è una piattaforma di messaggistica e streaming distribuita con bassa latenza, elevate prestazioni e affidabilità, capacità a livello di trilioni e scalabilità flessibile. Offre una varietà di funzionalità: Pattern di messaggistica tra cui publish/subscribe,...

cve-2019-11477-poc

cve-2019-11477-poc Test Semplice 1. Avvia due macchine virtuali una per un server SSL e l'altra per un client SSL 2. Server Esegui l'applicazione server cd apps ./server.sh 7000 3. Client Installa i pacchetti richiesti sudo apt-get install libmnl-dev sudo apt-get install libnetfilter-queue-dev 4...

CobaltBus

CobaltBus Integrazione C2 esterna di Cobalt Strike con Azure Servicebus, traffico C2 tramite Azure Servicebus Configurazione 1. Creare un Azure Service Bus 2. Creare un criterio di accesso condiviso stringa di connessione che possa solo Inviare e Ascoltare 3. Modificare la variabile statica...

cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions

Impact For jobs with shouldBeUnique = true the queue plugin will generate a 'unique identifier' based on the job class, method and parameters. If user data is supplied, a malicious user could create collisions, resulting in legitimate jobs being dropped. Patches Upgrade to 2.3.1 Workarounds You c...

GHSA-R5PM-VRC5-3M73 cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions

Impact For jobs with shouldBeUnique = true the queue plugin will generate a 'unique identifier' based on the job class, method and parameters. If user data is supplied, a malicious user could create collisions, resulting in legitimate jobs being dropped. Patches Upgrade to 2.3.1 Workarounds You c...

CVE-2026-54713

CakePHP Queue (a queue-interop compatible queueing library) has an incomplete comparison in QueueManager::getUniqueId() that affects versions 0.1.11 through 2.3.1 . When shouldBeUnique is enabled, the method generates job identifiers from the job class, method, and parameters, but sorting paramet...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ Was ist das? CrackLord ist ein System, das darauf ausgelegt ist, eine skalierbare, erweiterbare und verteilte Umgebung sowohl für das Knacken von Passwörtern als auch für andere Aufgaben, die viele Rechenressourcen benötigen, bereitzustellen. Anders...

CVE-2026-74742

A flaw was found in the Linux kernel's veth component. In a multi-queue setup without an eXpress Data Path XDP program attached, the vethpoll function incorrectly derives the index of the peer transmit TX queue to wake. This can cause a TX queue to stop indefinitely if it becomes full, as the...

EUVD-2026-66572

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

CVE-disclosures

CVE-2026-3171 e CVE-2026-3170 – Archana M Divulgazioni ufficiali di vulnerabilità a cura di Archana M. 🔹 CVE-2026-3171 Prodotto: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Tipo di vulnerabilità: Cross-Site Scripting CWE-79 File interessato: /queue.php Vettore...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

Este exploit para CVE-2026-24102 representa o auge da série SimoesCTT. Ao atacar o iouring—a interface assíncrona mais avançada do kernel Linux—você está atacando o próprio conceito de "Lógica Sequencial". No iouring, chamadas de sistema não são executadas; elas fluem. Exploraremos a Janela...

EUVD-2026-66826

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

exocomp

Exocomp Ambiente multi-agente self-hosted pensato per Golang. Caratteristiche Attenzione, cercatori di profitto e visionari! Gli organici ti costano tempo, stipendi e - peggio di tutto - benefit? Allora potenzia oggi stesso la tua operazione con la nuovissima unità di riparazione adattiva Exocomp...

CVE-2026-47860

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...