785885 matches found
DEBIAN-CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...
CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...
ssh-hardening
SSH Hardening Lock down SSH on Debian/Ubuntu in one run: new port, no root login, key-based auth, optional UFW and Fail2Ban. What you’ll see When you run the script, it detects your OS and shows the settings before asking to continue: Quick start step-by-step 1️⃣ Install git if needed On...
CVE-2026-22006-XSLT-Server-Side-Injection-via-xsl-script-
CVE-2026-22006 – xsl:script를 통한 XSLT 서버 측 주입 프로그램 코드 Python + XSLT root@kitploit: xsltserver.py - Applies user-supplied XSLT to XML from lxml import etree from flask import Flask, request app = Flaskname @app.route'/transform', methods='POST' def transform: xml = request.form'xml' xslt =...
CVE-2026-88790
proma-ai Proma versions up to 0.19.37 contain a path traversal vulnerability in the File Preview Service component, specifically in the resolveTargetPath function within apps/electron/src/main/lib/file-preview-service.ts. The root cause is a basename-collision fallback that allows an attacker to ...
CVE-2026-88790 proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
EUVD-2026-75507
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
CVE-2026-88790 proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
CVE-2026-88790 proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
Exploit for CVE-2026-78804
Dolibarr — Authenticated SQL Injection PoC SQL injection affe...
EUVD-2026-75451
MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...
CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering
MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...
CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering
MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...
CVE-2026-88921
MISP (versions ≤2.5.45) contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, used during PDF report export via the convert_markdown_to_pdf module. The attribute(), objectAttribute(), object(), and tag() methods interpolated user-controlled fields (attribute type...
CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering
MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...
cve-2025-2945-poc
pgAdmin4 Query Tool Authenticated RCE PoC Standalone python script to exploit pgAdmin4 query tool authenticated RCE vulnerability CVE-2025-2945 in pgAdmin4 version 8.10 - 9.1. Ported from Metasploit module: pgadminquerytoolauthenticated.rb References: https://vulners.com/cve/CVE-2025-2945...
CVE-2024-21626-PoC
CVE-2024-21626 Root cause & Proof of Concept How to use poc-autoplay? root@kitploit: make install make uninstall 1. Root cause In runc versions ≤ 1.1.11, when opening the host's /sys/fs/cgroup directory to set cgroups, the file descriptor is left open for the container initialization process...
CVE-2007-2447
CVE-2007-2447 PoC: Samba "usermap script" remote command-execution historical CVE. This repository contains a small proof-of-concept script for research and educational review. The primary script is usermapscriptCommandExecution.py. Reference writeup:...
CVE-2026-45763
Suricata 8.0.0 through 8.0.4 contains a flaw in its Lua sandbox where the security.lua.max-bytes memory limit was not consistently enforced for certain new allocation patterns. When Lua rules are enabled and an affected script is loaded, crafted allocation patterns could exceed the configured lim...
CVE-2026-45763 Suricata lua: sandbox allocation limit not enforced for new allocations
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...