dirtycow.cr

dirtycow Эксплойт CVE-2016-5195 Установка Перейдите в раздел релизов или используйте ваше окружение Crystal. Использование root@kitploit: dirtycow --target /path/to/root/file --string "string to write" --offset...

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-Непривилегированное-раскрытие-информации Репозиторий содержит описание для CVE-2023-31445, обнаруженной командой Dodge Industrial для платформы Dodge OPTIFY. Идентификатор CVE: CVE-2023-31445 Производитель: Cassia Networks Продукт: Access Controller Версия: Cassia-AC-2.1.1.22031714...

CVE-2026-54648

CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CCPERMREAD access and do not require CCPERMDELETE for the purge, noorderpurge, or deleteguests commands. An authenticated administrator with read-only customer...

CVE-2026-54648 CubeCart: Missing Authorization Check in customers.gdpr.inc.php Leads to Unauthorized Customer Data Deletion

CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CCPERMREAD access and do not require CCPERMDELETE for the purge, noorderpurge, or deleteguests commands. An authenticated administrator with read-only customer...

CVE-2026-54648

CubeCart (an ecommerce platform) is vulnerable to unauthorized customer data deletion in versions prior to 6.7.5 . The GDPR tools in admin/sources/customers.gdpr.inc.php rely only on page-level CC_PERM_READ access and fail to enforce CC_PERM_DELETE for the purge, no_order_purge, and delete_guests...

CVE-2026-54648 CubeCart: Missing Authorization Check in customers.gdpr.inc.php Leads to Unauthorized Customer Data Deletion

CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CCPERMREAD access and do not require CCPERMDELETE for the purge, noorderpurge, or deleteguests commands. An authenticated administrator with read-only customer...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Инструмент проверки безопасности Это инструмент для обнаружения поверхности атаки Apache ActiveMQ Classic, предназначенный для защиты и внутреннего аудита, помогающий оценить риски, связанные с CVE-2026-34197. Данный проект не содержит эксплойтов, не выполняет...

AZL-102489 CVE-2026-93144 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers checkptrtobtfaccess lets program-type btfstructaccess callbacks validate writes before the default BTF access path rejects non-read accesses. That bypasses the read-only policy fo...

DEBIAN-CVE-2026-90266

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge On a zoned FS, btrfsdelayedrefsrsvrefill returns -EAGAIN whenever the over-committed metadata plus the zoneunusable bytes exceeds the usable size in a...

AZL-102258 CVE-2026-90261 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btreewritepages start btreewritepages writes the btree inode's dirty metadata in ascending logical address order. On a zoned filesystem only one metadata and one system block gro...

CVE-2026-93144 bpf: Reject writes through untrusted BTF pointers

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers checkptrtobtfaccess lets program-type btfstructaccess callbacks validate writes before the default BTF access path rejects non-read accesses. That bypasses the read-only policy fo...

CVE-2026-90266

CVE-2026-90266 affects the btrfs zoned filesystem in the Linux kernel. When btrfs_delayed_refs_rsv_refill() returns a transient -EAGAIN (triggered when over-committed metadata plus zone_unusable bytes exceeds the usable size in a metadata block-group), the transaction is aborted during block-grou...

EUVD-2026-81859

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge On a zoned FS, btrfsdelayedrefsrsvrefill returns -EAGAIN whenever the over-committed metadata plus the zoneunusable bytes exceeds the usable size in a...

CVE-2026-90266 btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge On a zoned FS, btrfsdelayedrefsrsvrefill returns -EAGAIN whenever the over-committed metadata plus the zoneunusable bytes exceeds the usable size in a...

CVE-2026-90263 btrfs: check if root is readonly when setting posix acl

In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only property set to true, all write operations including acl and xattr should be denied. However, acl can still be set even if btrfs r...

EUVD-2026-81856

In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only property set to true, all write operations including acl and xattr should be denied. However, acl can still be set even if btrfs r...

CVE-2026-90261 btrfs: zoned: flush active metadata block group at btree_writepages() start

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btreewritepages start btreewritepages writes the btree inode's dirty metadata in ascending logical address order. On a zoned filesystem only one metadata and one system block gro...

EUVD-2026-81820

In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMITIO with nvmecmdallowed Unlike IOCMD / IO64CMD, NVMEIOCTLSUBMITIO never calls nvmecmdallowed. Unprivileged callers can thus issue I/O on a partition device or write through a read-only file descriptor. Pass...

wp-user-registration-vuln-checker

WordPress 사용자 등록 CVE-2026-1492 확인 도구 소유한 WordPress 사이트 중 User Registration & Membership 플러그인의 CVE-2026-1492 영향을 받을 수 있는 사이트를 위한 읽기 전용 확인 도구입니다. 사이트 소유자가 플러그인 노출 여부를 확인하고 숨겨진 관리자 계정, 의심스러운 업로드, cron 항목, 변조된 파일과 같은 침해 지표를 찾을 수 있도록 도와줍니다. 시작하기 필요 사항| 링크 ---|--- 도구 페이지 살펴보기|...

CVE-2025-57819_FreePBX-PoC

Средство проверки SQL-инъекций FreePBX 🔍 Безопасный детектор SQL-инъекций, работающий в режиме только для чтения для FreePBX /admin/ajax.php, ориентированный на параметры template, model и brand. 🛡️ Использует методы на основе ошибок , булевы и временные для выявления потенциальных инъекций без...