GTScan

GTScan The Nmap Scanner for Telco. With the current focus on telecom security, there used tools in day to day IT side penetration testing should be extended to telecom as well. From here came the motivation for an nmap-like scanner but for telco The current security interconnect security controls...

EUVD-2026-94697

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

CVE-2026-4480-PoC

CVE-2026-4480: Samba print-command %J injection PoC Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written authorization...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...

CVE-2026-98359

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. When an asynchronous RDMA port query retrieves link speed settings, the kernel fails to verify whether the associated network device is being unregistered before invoking its operations. A local user could exploit...

CVE-2026-98354

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. A remote attacker can trigger a Denial of Service DoS by repeatedly sending Management Datagrams MADs containing an invalid partition key PKey. Because the kernel does not properly track and free allocated receive...

CVE-2026-106244

A flaw was found in chromium-browser. An incorrect authorization issue within the permissions subsystem allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic. This flaw can enable unauthorized access to protected system resources...

CVE-2026-97680 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...

CVE-2026-97680 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...

CVE-2026-106354

A flaw was found in chromium-browser. Due to improper resource exposure in the Extensions subsystem, a remote attacker can access cross-origin data information belonging to different websites by convincing a user to view a crafted HTML page. Successful exploitation leads to unauthorized informati...

CVE-2026-89791

A flaw was found in the Linux kernel's perf subsystem. A race condition exists between the perf mmap revival and the last munmap operation. This allows a local unprivileged user to exploit a use-after-free vulnerability, leading to local privilege escalation to root...

CVE-2026-90049

A flaw was found in the Linux kernel's networking subsystem. When the skbzerocopy function fails to orphan fragments, it incorrectly calls skbtxerror on the source skbuff skb. This premature completion of the zerocopy user argument and clearing of the SKBFLSHAREDFRAG flag can lead to a condition...

CVE-2025-20352

CVE-2025-20352 SNMP Exposure Check onesixtyone + parser Fast, safe black-box exposure check for Cisco IOS/IOS XE devices related to CVE-2025-20352 SNMP subsystem: 1. Scan your subnets for SNMP using onesixtyone with default communities. 2. Parse sysDescr.0 banners with a small Python script to fl...

CVE-2026-31635

🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Privilege Escalation via RXGK Page Cache Corruption "DirtyDecrypt" — Part of the 2026 "Dirty" family exploits 📖 Overview DirtyDecrypt CVE-2026-31635 is a local privilege escalation vulnerability in the Linux kernel's rxrpc subsystem specifically...

copy-fail-mcp

Copy Fail MCP 📖 Installation Guide — quick start, manual setup, and troubleshooting CVE-2026-31431 — The worst Linux vulnerability ever discovered. Now controllable via MCP. 732 bytes of Python. No compilation. No race condition. No per-distro offsets. One shot, universal root on every Linux kern...

CVE-2026-89867

A flaw was found in the Linux kernel's media subsystem, specifically within the chips-media wave5 driver. This vulnerability occurs when multiple video decoder instances share a video processing unit VPU and a job slot is not properly released during the draining process, particularly if a decode...

CVE-2026-90384

A flaw was found in the Linux kernel's iomap subsystem. This issue arises when iomap callback functions, specifically -iomapbegin, fail to release a "folio batch" of memory pages during certain error conditions. This resource management oversight, particularly when used by filesystems like XFS,...

CVE-2026-90077

A flaw was found in the Linux kernel's network net subsystem. An issue in the copynetns error handling path allows for resources allocated during network namespace creation to leak. This occurs because the preinitnet function returns prematurely, preventing proper resource deallocation. A local...

CVE-2026-90346

A flaw was found in the Linux kernel's nl80211 Wi-Fi subsystem. This vulnerability allows for a memory leak during the processing of color-change beacon data. Specifically, a parsing failure can occur without proper cleanup of allocated memory. This can lead to resource exhaustion, potentially...