EUVD-2026-80052

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

CVE-2026-91734

A flaw was found in Google Chrome. This incorrect authorization vulnerability allows a local attacker to execute arbitrary code outside of the browser's security sandbox by using a local program. This could lead to a complete compromise of the affected system...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 概念验证 我用来演示 CVE-2015-2231 'Get Super Serial' 的 PoC。有几个人要求我把它发出来，以便他们可以在其他存在此漏洞、基于 ADUPS 固件的设备上使用类似的东西。趁它还没丢失，我正在清理笔记本电脑并发布这个。 用法 这个应用程序只创建一个可点击的按钮，它会以 system 身份执行 sh /data/local/tmp/yay/shell.sh。在 "scripts-for-device" 目录中是我实际使用的脚本，但并非所有二进制文件都可用。你可以从 SuperSU...

witchcraft

🎉 あなたのOPSECコンパニオン。witchcraft help または witchcraft manual（完全なマニュアル）を実行してください 🎉 何をするのか？ WITCHCRAFTは、単なるエイリアス以上のものです。busyboxと連携できるinitシステム、シェル、そしてハッキング、OSINT、フォレンジックなどのための自動化エンジンです。 名前 witchcraft - サイバーセキュリティのための多目的ツールキット 概要 witchcraft MODULENAME OPTION... FILE... IP... 説明...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

systeminformer

System Informer システムリソースの監視、ソフトウェアのデバッグ、マルウェアの検出を支援する、無料で強力な多目的ツールです。 Winsider Seminars & Solutions, Inc. が提供しています。...

CVE-2026-42980-POC

CVE-2026-42980 公开披露 本仓库包含 CVE-2026-42980 的公开披露材料，这是一个 Windows 内核 WMI 整数下溢漏洞，可在漏洞实验室构建中被利用以实现本地权限提升至 NT AUTHORITY\SYSTEM。 完整文章 英文文章 Artículo en español 仓库布局 root@kitploit: public/ README.md README.es.md writeup-en.md writeup-es.md build.ps1 Makefile src/ cve202642980lpe.c helpers.c wmiguids.h...

cve-2018-14634

cve-2018-14634 Este es un exploit publicado para investigadores, descubierto por Qualys, proveedor de soluciones de seguridad y cumplimiento basadas en la nube. Afecta a las versiones del kernel 2.6.x, 3.10.x y 4.14.x. Para explotar con éxito esta vulnerabilidad, los atacantes necesitan tener...

CVE-2020-11493

CVE-2020-11492 Prueba de concepto PoC para la vulnerabilidad de escalada de privilegios de Docker Desktop para Windows. Esta vulnerabilidad fue parcheada en la versión 2.3.0.2 de Docker el 11 de mayo de 2020. Este PoC realiza lo siguiente: crea una tubería con nombre named pipe que imita la tuber...

College-Management-System-course_code-SQL-Injection-Authenticated

学院管理系统 - 'coursecode' SQL注入（已验证） 1. 描述： College Management System 1.0 允许通过参数 'coursecode' 在 /College-Management-System/admin/asign-single-student-subjects.php 进行 SQL 注入。利用此问题可能允许攻击者破坏 应用程序、访问或修改数据，或利用底层数据库中的潜在漏洞。 2. 验证概念： 在 Burpsuite 中拦截受影响页面的请求，包含 'coursecode' 参数，并将其保存为 poc.req。然后运行 SQLmap...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

Zetsu

オフェンシブセキュリティナレッジのための個人用オフラインRAGシステム。あなたのwriteup、ラボの解答、バグバウンティレポート、セキュリティブログを取り込み、エンゲージメント中に自然言語でクエリできます。クラウド不要、SaaS不要、あなたの知識はあなたのものです。 機能概要 ZETSUは、蓄積した知識をクエリ可能なアシスタントに変えます。マークダウンファイルをgrepしたり、certipyコマンドがどのwriteupにあったかを覚えたりする代わりに、自然に質問できます。 root@kitploit: how do i escalate with...

TriforceAFL

新消息：如果你想尝试使用 TriforceAFL 和 TLSF，Richard Johnson 创建了一个 Dockerfile，可以同时安装两者（甚至为你构建一个 Linux 内核）。可在此处获取 https://hub.docker.com/r/moflow/afl-triforce/tags/。 另一项新消息：afl-tmin 现在支持 forkserver 了！ https://github.com/nccgroup/TriforceAFL Jesse Hertz [email protected] Tim Newsham [email protected] ...

hal

Welcome to HAL! HAL /hel/ is a comprehensive netlist reverse engineering and manipulation framework. Navigation 1. Introduction 2. Build Instructions 3. Quickstart Guide 4. Academic Context Introduction What the hell is HAL? Virtually all available research on netlist analysis operates on a...

EUVD-2026-80002

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...