CVE-2026-97146

Apache YuniKorn version 1.9.0 and earlier is vulnerable to an admission control bypass caused by system label forgery . By setting a secondary label of app=yunikorn on a pod, an attacker can bypass checks that limit the content of user annotations. This allows any user to specify arbitrary user i...

EUVD-2026-94257

Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is used to identify the YuniKorn application itself in the...

CVE-2026-97146 Apache YuniKorn: Admission control bypass via system label forgery

Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is used to identify the YuniKorn application itself in the...

CVE-2026-92393 Apache YuniKorn: Admission control bypass via workload UPDATE operation

Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE...

CVE-2026-92393

Apache YuniKorn versions 1.9.0 and earlier are vulnerable to an admission control bypass because the software fails to implement label and user annotation checks during the workload UPDATE action. This affects several Kubernetes objects, including deployments , replicasets , statefulsets , daemon...

CVE-2023-28467

MyBB 1.8.33 XSS persistante dans l'email du User CP - MyBB 1.8.33 XSS persistante dans l'email du User CP - Version MyBB "@cve.com Solution Mettez à niveau MyBB vers la version 1.8.34 ou supérieure...

Nosql-MongoDB-injection-username-password-enumeration

Nosql injection username and password enumeration script Using this script, we can enumerate Usernames and passwords of Nosqlmongodb injecion vulnerable web applications. Exploit Title: Nosql injection username/password enumeration. Author: Kalana Sankalpa Anon LK. Website:...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

CVE-2016-6210-Exploit

Ceci est la première version de l'exploit « armé » pour CVE-2016-6210 Contexte : Publié par Eddie Harari sur Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 Le résumé : En envoyant de grands mots de passe, un utilisateur distant peut énumérer les utilisateurs sur un système qui...

acheron

À propos Acheron est une bibliothèque inspirée de SysWhisper3/FreshyCalls/RecycledGate, dont la plupart des fonctionnalités sont implémentées en assembleur Go. Le package acheron peut être utilisé pour ajouter des capacités d'appels système indirects à votre arsenal Golang, afin de contourner les...

CVE-2025-64391

A vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to write arbitrary files as SYSTEM by manipulating mount points and symbolic links during installation. This issue affects Veeam Agent for Microsoft Windows versions 13.0.4.1341 and all earlier version 13 and ...

EUVD-2025-211041

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

CVE-2025-64391

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

EUVD-2026-94226

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

CVE-2026-58068

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

DirtyClone

DirtyClone CVE-2026-43503 — PoC на Python Неофициальный порт DirtyClone на Python — локальная уязвимость повышения привилегий в ядре Linux. Этот репозиторий содержит рабочее доказательство концепции , которое позволяет непривилегированному локальному пользователю получить права root, используя...

ConscryptTrustUserCerts

Magisk - Conscrypt Trust User Certs Этот модуль добавляет все установленные пользовательские сертификаты в хранилище сертификатов APEX-модуля com.android.conscrypt в Android 14, благодаря чему они будут автоматически использоваться при построении цепочки доверия. Установка 1. Установите Magisk 2...

CVE-2025-59712_CVE-2025-59713

PoC для CVE-2025-59712 и CVE-2025-59713 Этот PoC предоставляет автоматизированный скрипт для эксплуатации CVE-2025-59712 XSS в заголовке User-Agent и CVE-2025-59713 небезопасная десериализация. Контекст Эти две уязвимости были обнаружены компанией Synacktiv в ходе исследования безопасности...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

cve-2018-15473

CVE-2018-15473 OpenSSH 7.7까지의 버전은 잘못된 인증 사용자에 대한 패킷이 완전히 파싱될 때까지 지연시키지 않아서, auth2-gss.c, auth2-hostbased.c, auth2-pubkey.c와 관련된 사용자 열거 취약점에 취약합니다. 설치 배포판에 맞는 openssl-dev 패키지를 설치해야 할 수도 있습니다. 참고: 칼리Kali에 설치하는 경우 pip install은 건너뛸 수 있습니다. paramiko가 이미 있습니다. git clone...