Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background...

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery SSRF that...

CVE-2026-111577 GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings

The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configuration page, which is gated only on the GoSMTP WordPress plugin before 1.2.5-activation capability, allowing users with a delegated role below administrator to change outbound ma...

ROOT-APP-PYPI-CVE-2026-75507 CVE-2026-75507 in graphql-core - Patched by Root

Root has patched CVE-2026-75507 in the graphql-core package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-75508 CVE-2026-75508 in graphql-core - Patched by Root

Root has patched CVE-2026-75508 in the graphql-core package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102937 CVE-2026-102937 in virtualenv - Patched by Root

Root has patched CVE-2026-102937 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102925 CVE-2026-102925 in virtualenv - Patched by Root

Root has patched CVE-2026-102925 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-113776 CVE-2026-113776 in virtualenv - Patched by Root

Root has patched CVE-2026-113776 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102930 CVE-2026-102930 in virtualenv - Patched by Root

Root has patched CVE-2026-102930 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-CG2G-XH64-V4Q7 GHSA-cg2g-xh64-v4q7 in dompurify - Patched by Root

Root has patched GHSA-cg2g-xh64-v4q7 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-113725 CVE-2026-113725 in virtualenv - Patched by Root

Root has patched CVE-2026-113725 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-114134 CVE-2026-114134 in black - Patched by Root

Root has patched CVE-2026-114134 in the black package for Root:PyPI. Multiple fixed versions available...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 exploit device info: - iQOO Neo7 SE - PD2238...

CVE-2026-115522

Exposure of Resource to Wrong Sphere CWE-668 in FileArtifactService in Google Agent Development Kit ADK for Python google-adk versions 1.19.0 before 1.39.1 and 2.0.0a1 before 2.7.0 allows a caller in one application to list, read, overwrite, or delete artifacts belonging to another application wh...

CVE-2024-6387

CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's server...

ROOT-APP-PYPI-CVE-2026-113722 CVE-2026-113722 in virtualenv - Patched by Root

Root has patched CVE-2026-113722 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

CVE-2026-9082-Drupal-PoC

CVE-2026-9082 - Drupal Core PostgreSQL SQL Injection PoC Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-9082 , a Highly Critical SQL injection vulnerability in Drupal Core affecting all PostgreSQL-backed sites running Drupal 8.0 through 11.3.9. The flaw resides in...

cve-2025-29927-nextjs

Himalaya Tech Admin Panel — CVE-2025-29927 Demo WARNING: This application is intentionally vulnerable. For educational and authorized security research purposes only. Do NOT deploy to a public server. About This Demo This app demonstrates CVE-2025-29927 , a critical authentication bypass...

CVE-2010-4669

rauok This tool exploits CVE-2010-4669 https://vulners.com/cve/CVE-2010-4669 Be careful when testing, especially on older networks. Usage usage: ./main.py interface thread-count packet-count Dependancies -python2 -scapy -root...

CVE-2026-41089-Netlogon-RCE-PoC

🛡️ CVE-2026-41089 Netlogon Security Research & AI Security Tool Module Security Research • Defensive Validation • AI Security Tool Integration 🌐 Демо-версия • 📚 Сайт проекта • 💬 Чат сообщества Website navigation: Home • Updates • Downloads • Modules Official AI Security Tool module page 🧠...