CVE-2026-80708 s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

CVE-2026-80708 s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

CVE-2026-80607 tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

CVE-2026-80607 tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

CVE-2026-80607

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

EUVD-2026-67483

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

CVE-2026-80607

CVE-2026-80607 affects the Linux kernel in the tracing/probes subsystem. The issue is a WARN_ON_ONCE() in parse_btf_arg that can be easily triggered by a user adding a kprobe event based on a raw address with a BTF parameter . Since this is not truly an unexpected condition, the fix removes the w...

CVE-2026-5097 wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CVE-2026-5097 wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

EUVD-2026-67466

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CVE-2026-5097

The wpForo Forum plugin for WordPress is affected by an unauthenticated SQL Injection via the 'referer' parameter in all versions up to and including 2.4.17 . The root cause is insufficient escaping on the user-supplied parameter combined with a lack of sufficient preparation on the existing SQL ...

CVE-2025-53547-POC

CVE-2025-53547 POC Dies ist ein PoC für CVE-2025-53547 Chart.lock verknüpft die Testdatei mit /tmp/1.txt /tmp/1.txt injiziert einen Befehl, der /tmp/2.txt erstellt. In einer realen Produktumgebung können Sie die Chart.lock-Link-Datei ändern, um jeden gewünschten Befehl zu injizieren, wie zum...

CVE-2024-53677-POC

CVE-2024-53677 Una vecchia vulnerabilità che colpisce Apache Struts portando a LFI ed esecuzione remota. maggiori informazioni sulla vulnerabilità, puoi consultare questo fantastico blog. Apache Struts path traversal → RCE CVE-2024-53677 Utilizzo POC Ho dedicato molto tempo per rendere questo...

Xjar_tips

Xjartips Einführung: root@kitploit: Spring Boot JAR-Tool zum sicheren Verschlüsseln und Ausführen; unterstützt auch native JAR-Dateien. Basiert auf der Verschlüsselung von Ressourcen im JAR-Paket und einem erweiterten ClassLoader – ein Konzept für verschlüsseltes Starten und dynamisches...

webuploader-0.1.15-Demo

Il componente webuploader-v-0.1.15 presenta una vulnerabilità di upload di file non autorizzato Introduzione: il componente Baidu WebUploader presenta una vulnerabilità di upload di file. La vulnerabilità è dovuta al fatto che la pagina di upload del componente WebUploader non filtra rigorosament...

St2-052

Test del PoC per S2-052 nome originale: distribuzione del war su Tomcat Indirizzo originale: http://blog.csdn.net/caiqiiqi/article/details/77861477 Scarica l'ultima versione interessata, struts-2.5.12, dal sito ufficiale di Struts2, all'indirizzo:...

CVE-2026-6279

CVE-2026-6279 Avada Builder = 3.15.2 — Unauthenticated RCE via calluserfunc ohne Allowlist Zusammenfassung der Schwachstelle Schwachstelle Remote Code Execution RCE ohne Authentifizierung im Plugin Avada Builder Fusion Builder Version = 3.15.2, verwendet im WordPress-Theme Avada — einem der...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder Um campo oculto. Um valor alterado. Acesso total a todo o site. 🧨 O que o Atacante Pode Fazer? 🔬 Análise da Vulnerabilidade Localização da Vulnerabilidade root@kitploit: includes/shared/handlers/FormSubmissionHandler.php → createuser Código Vulnerável...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 असुरक्षित पासवर्ड रीसेट तंत्र → पूर्ण व्यवस्थापक खाता अधिग्रहण प्लेनटेक्स्ट पासवर्ड रीसेट कुंजियाँ डेटाबेस में संग्रहीत + SQL इंजेक्शन = पूर्ण व्यवस्थापक अधिग्रहण 📋 भेद्यता जानकारी आइटम| विवरण ---|--- CVE ID| CVE-2026-5076 प्लगइन| ARMember – सदस्यता प्लगइन...

KeePass-CVE-2023-24055

KeePass-CVE-2023-24055 KeePass CVE-2023-24055 Reproduktion KeePass CVE-2023-24055 Reproduktion 1. Vorbereitung der Maschinen: Kali 192.168.232.129, Windows 10 192.168.232.128 2. KeePass-Version: 2.53 2. Prinzip: Durch Ändern der KeePass-Konfigurationsdatei KeePass.config.xml wird eine...