path-traversal-CVE-2026-14628

Path Traversal Demo - Case Study : CVE-2026-14628 A minimal, runnable demonstration fo the Path TraversalCWE-22 vulnerability class, usicng the recently dislosed CVE-2026-14628 as a real-world reference point. The real vulnerability CVE-2026-14628 affects 'NousResearch/hermes-agent' 2026.5.16. Th...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

cve-2026-43499

IonStack Exploit del kernel para Redmi Pad Pro dizi / POCO Pad 5G. Despliegue en Cloudflare Pages Integración con Git 1. Ve a Cloudflare Dashboard Workers & Pages Create Pages Connect to Git 2. Selecciona este repositorio 3. Ajustes de compilación: Preajuste de framework: None Comando de...

Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Predict Component uses ITOM Rel 3.0.0: idna-3.11-py3-none-any.whl which are vulnerable to CVE-2026-45409. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-45409 DESCRIPTION: Internationalized Domain Names ...

CVE-2026-6741

CVE-2026-6741 CVE-2026-6741 is a CVSS 8.8 High Authenticated Agent+ Privilege Escalation vulnerability in the LatePoint – Calendar Booking Plugin CVE-2026-6741 — LatePoint Privilege Escalation Scanner Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events latepoint CVE ID:...

CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify SAML AttributeValue XML Injection → Escalada de Privilegios samlifyValue — se inserta sin escapar , por lo que un usuario normal puede inyectar elementos adicionales p. ej. role=admin en su propia aserción SAML firmada por el IdP. Debido a que la inyección ocurre antes de...

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

K000163238: OpenSSL vulnerability CVE-2026-54876

Security Advisory Description Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per T...

CVE-2026-23550

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗...

xz: XZ Utils: Denial of Service via buffer overflow in index decoding

A flaw was found in XZ Utils. When the lzmaindexdecoder function processes an empty index, and a subsequent lzmaindexappend operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service DoS for affected systems...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell CVE-2025-55182: El Bug de Deserialización que Rompió la Web ⚡ React2Shell, CVE-2025-55182, Vulnerabilidad RCE: Un análisis crítico de la falla de deserialización insegura en React Server Components que permite ejecución remota de código no autenticada en configuraciones por defecto de...

valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

CVE-2026-27475

CVE-2026-27475 CVSS-B 9.2 CRÍTICO Deserialización insegura autenticada en SPIP 4.4.8 Explicaciones y más en mi sitio web RCE Gadget Attacker plugins/rcegadget/rcegadgetoptions.php root@kitploit: DEBUG:\n"; echo "File: "; vardump$this-file; echo "Data: "; vardump$this-data; echo "";...

Security Bulletin: Vulnerability in IBM SDK affectecting Rational Business Developer

Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU plus four additional vulnerabilities used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS...

Security Bulletin: Vunerabilities in IBM SDK affecting Rational Business Developer

Summary There are vulnerabilities in IBM SDK Java Technology Edition Quarterly CPU including Oracle April 2026 CPU. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-22021 DESCRIPTION: Easily exploitable vulnerability allows unauthenticat...

Security Bulletin: Vulnerability in IBM Seumeru affectecting Rational Business Developer

Summary There are vulnerabilities in IBM Semeru Runtime Quarterly CPU Includes OpenJDK July 2026 CPU plus three additional vulnerabilities used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-41254...

HiveV5_file_decryptor

Decodificador de archivos HiveV5 PoC Introducción El trabajo realizado en los últimos meses ha sido necesario para revelar el mecanismo de cifrado malicioso de archivos de Hive v5-5.2. El trabajo se dividió en dos partes: 1. Descifrado de flujo de claves keystream 2. Descifrado de archivos...

BumbleCrypt

BumbleCrypt Un crypter inspirado en Bumblebee Antecedentes BumbleCrypt está inspirado en el crypter de Bumblebee. En el caso de Bumblebee, el DLL principal de Bumblebee se carga en la memoria y se ejecuta de la siguiente manera: Descifra y escribe el payload en el Heap Engancha tres NtApi's -...

NimDllSideload

Nim DLL Sideloading This repo allows you to easily generate Nim DLLs you can use sideloading/proxy loading. If you're unfamiliar with what DLL sideloading is, take a gander at this blog post. How do I use this? Put the legit DLL or multiple DLLs you want to proxy into the build directory of this...