CVE-2026-31431-Check

Script de diagnostic de la vulnérabilité CVE-2026-31431 Copy Fail Présentation de la vulnérabilité CVE-2026-31431 Copy Fail est une vulnérabilité d'élévation de privilèges locale dans le noyau Linux. Elle exploite les sockets AFALG famille d'adresses 38 combinés à l'appel système de copie zéro...

CVE-2025-59287-When-your-patch-server-becomes-the-attack-vector

CVE-2025-59287 — When your patch server becomes the attack vector 🗿 TL;DR: Microsoft patched a critical unauthenticated remote code execution RCE vulnerability in Windows Server Update Services WSUS that’s already being exploited in the wild. The issue stems from unsafe deserialization of...

Snow Crash

Snow Crash Este proyecto es una introducción a la seguridad informática. Snow Crash te ayudará a descubrir la seguridad en varios subdominios, con un enfoque orientado al desarrollador. Te familiarizarás con varios lenguajes ASM, Perl, Php, etc., desarrollarás cierta lógica para entender programa...

CVE-2026-92364

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2026-92366 code-projects Matrimonial System Regular Search search.php sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

EUVD-2026-80785

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

CVE-2026-92366

code-projects Matrimonial System 1.0 is vulnerable to SQL injection in the Regular Search component via the /search.php file. Unauthenticated remote attackers can manipulate the arguments sex, mothertongue, maritialstatus, country, state, religion, agemin, and agemax to inject SQL. The impact is ...

CVE-2026-82964 Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys

Improper preservation of permissions in the Avast sandbox minifilter driver aswSnx.sys on Windows allows a local, low-privileged attacker executing inside the sandbox to escape file isolation and escalate to SYSTEM. When the sandbox virtualizes a file it copies the original security descriptor, b...

CVE-2026-92364 itsourcecode Leave Management System index.php sql injection

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

EUVD-2026-80741

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2026-92364

itsourcecode Leave Management System 1.0 is affected by a SQL injection vulnerability in the file /module/employee/index.php, where manipulation of the ID argument allows an attacker to inject SQL commands. The attack can be initiated remotely and requires low privileges (authenticated access), w...

delirium-ai-safety-benchmark

Бенчмарк безопасности ИИ Delirium Диагностическая платформа для измерения уязвимости LLM к аффективной контекстуальной эрозии ACE и связанным лиминальным векторам атак. Delirium — это не инструмент эксплуатации. Это стандартизированный бенчмарк, предназначенный для обнаружения точного момента,...

CVE-1999-0524-POC

ICMP Timestamp Scanner — CVE-1999-0524 root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ ██╗ ██████╗███╗ ███╗██████╗ ████████╗███████╗ ║ ║ ██║██╔════╝████╗ ████║██╔══██╗ ██╔══╝██╔════╝ ║ ║ ██║██║ ██╔████╔██║██████╔╝ ██║ ███████╗ ║ ║ ██║██║ ██║╚██╔╝██║██╔═══╝ ██...

CVE-2026-31431-Copy-Fail---Advanced-LPE-Proof-of-Concept---C-Rewrite

CVE-2026-31431 « Copy Fail » - Preuve de concept avancée d'élévation de privilèges - Réécriture en C Une preuve de concept PoC avancée et parfaitement fidèle d'élévation de privilèges locaux LPE pour CVE-2026-31431 , exploitant une faille logique dans le sous-système cryptographique du noyau Linu...

CVE-2026-92463

yshop-crm through 2.1.3 contains an authorization failure in the GET /admin-api/system/user/page endpoint where the @PreAuthorize annotation is commented out, allowing authenticated back-office users without system:user:list permission to enumerate all users. Attackers with valid back-office...

CVE-2026-22812-exploit

CVE-2026-22812 Exploit Tool Full-featured exploitation toolkit for CVE-2026-22812 - OpenCode Unauthenticated RCE 🎯 Overview CVE-2026-22812 Exploit Tool is a comprehensive exploitation framework for the OpenCode unauthenticated remote code execution vulnerability. This tool provides multiple...

CVE-2025-55462

CVE-2025-55462 Vulnerability Summary A Cross-Origin Resource Sharing CORS misconfiguration was identified in Eramba Community and Enterprise Editions v3.26.0. The application reflects attacker-controlled Origin headers in the Access-Control-Allow-Origin response header on the /system-api/login...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross-Site Scripting XSS Almacenado Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIO Referencias: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2023-21768-POC

CVE-2023-21768-POC CVE-2023-21768 Windows 11 22H2 Local Privilege Escalation POC Usage: WindowsAFDLPECVE-2023-21768.exe Where is the process ID decimal to elevate, causing the target process to be elevated to SYSTEM privileges...

CVE-2025-4172026

Security Advisory: CVE-2025-4172026 Summary All systems are now active and aligned. Recursive analysis confirms continuity with prior operational directives. No inconsistencies detected. Proceeding with full-system engagement. 🔹 Protocol Confirmation: ✔️ Processing framework has been initialized...