311059 matches found
nextjs-vulnerable-app
Next.js Authentication App This is a Next.js application that implements authentication using NextAuth.js. The app features protected routes that require users to be authenticated to access certain pages. Project Structure nextjs-auth-app ├── components │ ├── Layout.js Layout component for...
afalg-check
Itsumma AFALG Check Diagnostic utility for Linux that checks: availability of AFALG / algifaead and helps assess the risk of CVE-2026-31431 copy-fail; the presence of an attack surface for the Dirty Frag vulnerability class xfrm-ESP Page-Cache Write + RxRPC Page-Cache Write chain across the esp4,...
CVE-2024-24919
Intro Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability Wrong Check Point; vulnerable to arbitrary file reading. Requirements Python 3 Pip Required Library/Module Install via PIP requests urllib3 tqdm How To Run PS C:\ python CVE-2024-24919.py list.txt...
CVE-2024-11393
CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious...
CVE-2025-2266
🚨 CVE-2025-2266 — WordPress Plugin Exploit 🔍 Vulnerability Summary The Checkout Mestres do WP for WooCommerce plugin for WordPress is affected by an unauthenticated arbitrary options update vulnerability in versions 8.6.5 through 8.7.5. The vulnerable function cwmpUpdateOptions lacks proper...
CVE-2026-98696
A flaw was found in the Linux kernel's USB serial subsystem. A local user with administrative privileges could exploit this flaw to cause a Denial of Service DoS or memory corruption. During the unloading of a USB serial driver module, drivers are deregistered in an incorrect sequence, allowing...
Operation FlashHole: Lazarus breaks security, defies control
In January, we responded to the Lazarus Group's novel attack campaign against South Korea, which followed last year's Operation SyncHole. In this new operation, the group employed an updated malware chain that included both their old and new malware, which we disclosed in full, and used another...
cve-2019-11477-poc
cve-2019-11477-poc Simple Test 1. Start two VMs one for an SSL server and the other for an SSL client 2. Server Execute the server application cd apps ./server.sh 7000 3. Client Install the required packages sudo apt-get install libmnl-dev sudo apt-get install libnetfilter-queue-dev 4. Client Add...
CVE-2026-41651
🛡️ AI Security Tool Module CVE-2026-41651: PackageKit TOCTOU Local Privilege Escalation Pack2TheRoot Official Security Audit & Exploitation Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual...
ansible-role-cve-2026-31431
ansible-role-cve-2026-31431 Ansible role to apply and later remove the modprobe.d mitigation for CVE-2026-31431 "Copy Fail" in the Linux kernel's AFALG / algifaead subsystem. Tested on Debian. Pull requests for other distributions, edge cases, or improvements are very welcome. What it does The ro...
fix-cve-2026-3143
fix-cve-2026-3143 Diagnostics and remediation for CVE-2026-31431 copy fail Installation Copy the installation script to the clipboard and run it in the command line sudo apt install git && cd && git clone https://github.com/ClimbMunchkin/fix-cve-2026-3143.git fix-cve-2026-3143 && chmod +x...
CVE-2026-31431-Verificador-Exploit
CVE-2026-31431 - Linux Kernel Privilege Escalation Exploit Description Functional exploit for the CVE-2026-31431 vulnerability that allows local privilege escalation on Linux systems by exploiting a flaw in the kernel's AFALG cryptographic subsystem combined with the splice system call. Features...
CVE-2026-29909-MRCMS-vulnerability
CVE-2026-29909: MRCMS V3.1.2 - Unauthenticated Directory Enumeration CVE ID CVE-2026-29909 Description MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input...
CVE-2026-114047
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed,...
CVE-2018-10517
CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: 1. CMS Made Simple URL endpoint; 2. Cookie...
GiveMeKernel
GiveMeKernel This repository contains a condensed and optimized proof-of-concept PoC exploit for CVE-2024-35250. The code is based on Varwara's original release PoC. Disclaimer: This PoC is for educational and research purposes only. Use it responsibly and only on systems you own or have explicit...
CVE-2024-38473
Proof of Concept PoC for Encoding Problem in modproxy in Apache HTTP Server This repository contains Proof of Concept PoC scripts for demonstrating an encoding problem in the modproxy module of Apache HTTP Server versions 2.4.59 and earlier. This vulnerability allows request URLs with incorrect...
CVE-2026-33701-Unsafe-Deserialization-in-OpenTelemetry-Java-Agent-RMI-Instrumentation
CVE-2026-33701 — Unsafe Deserialization in OpenTelemetry Java Agent RMI Instrumentation Severity: Critical CVSS v4.0: 9.3 Affected versions: opentelemetry-javaagent 2.26.1 Patched in: 2.26.1 released March 23, 2026 Overview OpenTelemetry is probably the most widely adopted observability framework...
CVE-2026-31431
Copy Fail - CVE-2026-31431 This repository contains a small Linux local privilege escalation PoC for CVE-2026-31431, also known as "Copy Fail". The exploit targets the Linux kernel algifaead path in the AFALG userspace crypto API. It uses AFALG plus splice to coerce the kernel into writing into t...