libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

CVE-2023-27350

CVE-2023-27350 Esta herramienta está diseñada específicamente para el Massive Authentication Bypass Papecut MF/NG, que se refiere a un proceso de eludir o saltarse mecanismos de autenticación a gran escala. Captura de pantalla Requisitos Python3.7+ Sistemas operativos compatibles Linuxer Wingays...

libssh2: integer overflow via large username or password arguments

A flaw was found in the libssh2 library. A remote attacker can exploit an integer overflow vulnerability in the userauthpassword function by manipulating the usernamelen or passwordlen arguments and cause a heap-based buffer overflow. This leads to a crash to the application linked to the library...

libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

A flaw was found in libssh2. A malicious SSH Secure Shell server can exploit a double-free vulnerability in the sftpopen function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP SSH File Transfer Protocol session. This heap corruption can...

Awesome-LLMs-for-Vulnerability-Detection — Updated!

Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier. Title| Venue| Year| Paper| Github...

CVE-2025-55182

CVE-2025-55182 - React2Shell 针对 CVE-2025-55182 的改良与增强型漏洞利用工具，该漏洞是一个在 React Server 19.0、19.1.0、19.1.1 和 19.2.0 版本中存在预认证远程代码执行漏洞。 该漏洞涉及以下组件： react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack 补丁 通过以下检查修复了使用 chunk 引用来检索原型属性的问题： root@kitploit: @@ -78,7 +80,10 @@ export functi...

CVE-2026-82815

MegaEase EaseProbe (up to version 2.3.0) contains an improper access control flaw in the realIP function of web/server.go (Middleware component). An attacker can manipulate the X-Forwarded-For , X-Real-IP , or True-Client-IP headers to bypass access controls. The attack is remote , requires no pr...

CVE-2026-82815 MegaEase EaseProbe Middleware server.go realIP access control

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The attack can be initiated remotely. The...

EUVD-2026-68682

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The attack can be initiated remotely. The...

CVE-2026-82815 MegaEase EaseProbe Middleware server.go realIP access control

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The attack can be initiated remotely. The...

zaphoxx-coldfusion

zaphoxx-coldfusion exploit de coldfusion basado en https://cvedetails.com/cve/CVE-2009-2265/ La razón principal por la que configuré un script en Python para este CVE en particular fue que la versión de Metasploit del mismo no me funcionó cuando intenté resolver la máquina Arctic de HTB. También...

CVE-2019-2215

CVE-2019-2215 免责声明：此处提供的代码仅供教育和展示目的。我不支持，也不对任何将此代码（或其信息、其构建、或本仓库中的任何内容）用于非法或不道德目的的人承担责任 致谢 基于 Google Project Zero 的 Jann Horn 和 Maddie Stone 的概念验证 特别感谢 CloudFuzz 的工作坊，让我能够编写此漏洞利用程序。 另外感谢 kangtastic 提供了另一个参考来源。 使用方法 要构建漏洞利用程序： root@kitploit: NDKROOT=/Android/Sdk/ndk/22.0.7026061 make...

ghostdebug

GhostDebug GhostDebug es un prototipo de depurador para Windows x64 compuesto por una DLL de depuración nativa y un cliente de línea de comandos de .NET Framework. Está pensado para depurar objetivos que utilizan comprobaciones de detección de depuradores. Para conocer los antecedentes del diseño...

AudioServer-Voip-Recorder

Objetivo: Demostrar la captura de flujos VoIP enganchando el audioserver de Android específicamente libaudioflinger.so y grabando los buffers PCM de subida micrófono y bajada altavoz cuando el sistema está en modo communication. Diseño del Proyecto y Metodología Arquitectura: App de Control Andro...

CVE-2026-82809

A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the function window.addEventListener of the component postMessage Handler. Performing a manipulation of the argument vidiqEvent results in information disclosure. The attack is...

CVE-2026-82810

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

CVE-2026-82808

A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown function of the file dist/service-worker.production-esm.js of the component Google OAuth Client Secret. Such manipulation leads to hard-coded credentials. The attack can be execut...

CVE-2026-51724

Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove Smart QoS rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51722

Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to repoint the device to an attacker-controlled upstream Wi-Fi via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51721

Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter the mesh pairing state via sending a crafted POST request to /cgi-bin/cstecgi.cgi...