CVE-2015-7547-master

We are providing this code as-is. You are responsible for protecting yourself, your property and data, and others from any risks caused by this code. This code may cause unexpected and undesirable behavior to occur on your machine. This code may not detect the vulnerability on your system. Note...

CVE-2026-91854

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-91853

A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089B20211224. The impacted element is the function exportOvpn of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user of the component Export Ovpn Handler. The manipulation of the argument filetype leads to os command injection. The...

CVE-2026-55690

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, EmbedServiceFactory::newFromName in includes/EmbedService/EmbedServiceFactory.php interpolates an...

CVE-2026-55691

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, EmbedHtmlFormatter::toHtml in includes/EmbedService/EmbedHtmlFormatter.php passes the user-supplied class...

CVE-2026-55692

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, with the default $wgEmbedVideoRequireConsent configuration enabled,...

CVE-2026-44778

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-19780

Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...

react2shell

React2Shell CVE-2025-55182 Next.js: CVE-2025-66478 Unauthenticated RCE in React Server Components Flight Protocol - PoC Exploit Description React Server Components Flight protocol deserialize attacker-controlled multipart/form-data without validating prototype-chain access. A single unauthenticat...

CVE-2026-28767

CVE-2026-28767: Missing Authentication on Administrative Notifications Endpoint Advisory Field| Value ---|--- CVE| CVE-2026-28767 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 5.3 Medium Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-306 Missing Authentication for Critical Function...

CVE-2026-5513

CVE-2026-5513 https://t.me/FreeToolsCpa CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie CVE CVSS Type Auth https://t.me/FreeToolsCpa CVE file In Group Overview Field Value CVE ID CVE-2026-5513 Vulnerability Stored Cross-Site Scripting XSS...

CVE-2026-55770

A flaw was found in OpenBao. When the LDAP authentication backend is configured, an attacker can manipulate a username with special characters to alter the LDAP search query. This allows the attacker to select a different directory entry, potentially gaining unauthorized access to secrets,...

CVE-2026-31024

CVE-2026-31024 Vulnerability Report: Steghide Stack-Based Buffer Overflow & Information Disclosure Field| Value ---|--- Target Application| Steghide Linux Binary Affected Version| 0.5.1 Confirmed; earlier versions likely affected Vulnerability Type| Stack-Based Buffer Overflow CWE-121 Impact|...

CVE-2026-28766

CVE-2026-28766 Missing Authentication: User Account Endpoint Field| Value ---|--- CVE| CVE-2026-28766 Severity| Critical 9.3 CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Weakness CWE| CWE-306: Missing Authentication for Critical Function Affected components| Cloud API 2.12.2026 Vendo...

Playbooks

Table of Content TOC IR Playbooks This repository contains all the Incident Response Playbooks and Workflows of Company's SOC. Each folder contains a Playbook that is broken down into 6 section as per NIST - 800.61 r2 1- Preparation This section should include the following informations List of A...

WebKit-Bug-256172

WebKit-Bug-256172 Safari 1day RCE Exploit, might be patched in iOS 16.5.1/macOS 13.4.1 Confirmed exploit works on macOS 13.3.1, iOS 15.8.2. Description Currently only works on macOS 13.0.1 x8664 due to hardcoded offsets. Implemented addrof/fakeobj, r/w primitive Patch...

CVE-2026-44778

Inspektor Gadget (v0.28.0–0.53.1) is an eBPF-based toolset for system inspection on Kubernetes and Linux hosts. The USDT note parser in pkg/uprobetracer/usdt.go lets an unprivileged container crash or OOM-kill the privileged IG process via a crafted ELF. Three defects contribute: getUsdtInfo() do...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...