Linux Distros Unpatched Vulnerability : CVE-2026-57160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint...

PT-2026-86533

MISP's UiBeta theme collection view app/View/Themed/UiBeta/Collections/view.ctp performed a secondary query of member events by UUID without applying the caller's access control list ACL. The CollectionsController::view action correctly resolved collection element UUIDs through...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053409 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053301 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdiscresetalltxgt vs dequeue race for lockless qdiscs When shrinking the number...

Exploit for Code Injection in Grafana

CVE-2026-27876: Grafana SQL Expressions Arbitrary File Write t...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC 堆溢出 → RCE PoC 针对 Knot Resolver 的 DNS-over-QUIC DoQ 接收路径中可远程触发的堆缓冲区溢出的概念验证，该漏洞可以以 knot-resolver 服务用户身份实现远程代码执行。 组件： kresd DoQ 监听器（daemon/quicconn.c） 影响版本： Knot Resolver 6.3.0（已在 6.3.0-cznic.1bookworm 上验证） 修复版本： Knot Resolver 6.4.1（2026-07-22 发布） 漏洞类型：...

CVE-2024-56426

Exploit del BootROM SM-G985F / Exynos9830 !CAUTION El conjunto de claves actual y los archivos generados son capaces de realizar fusing. Una vez que un dispositivo ha sido fusionado, el cambio de eFuse es irreversible y el dispositivo debe seguir usando imágenes de arranque y material de claves q...

Exploit for Classic Buffer Overflow in Apple Macos

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-...

Exploit for Type Confusion in Google Chrome

CVE-2026-78938 — V8 TurboFan CheckMaps instance-migration type...

CVE-2022-24706

CVE-2022-24706 贡献者 白帽学校第4期39班 金正贤@junghyeonkum CouchDB Erlang分布式远程命令执行漏洞 CVE-2022-24706 摘要 Apache CouchDB 是一个用 Erlang 实现的开源面向文档的 NoSQL 数据库。 由于 Apache CouchDB 是用 Erlang 开发的，它默认支持分布式计算（集群）功能。集群节点之间通过 Erlang/OTP Distribution Protocol 进行通信，通过该协议，可以以运行 CouchDB 的用户权限执行操作系统（OS）命令。 要执行操作系统命令，需要知道 Erlang...

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the fl...

exploitgym-unified

ExploitGym Unified Runner - 898 instâncias + Dashboard Live R...

node9-proxy v2.8.3

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

GhostUnlock-SM-S918U

GhostUnlock — Samsung Galaxy S23 Ultra SM-S918U1, dm3q Temp...

CVE-2026-15981

CVE-2026-15981 SAML Single Sign On = 5.4.4 - 通过 SAMLResponse 参数实现未认证身份验证绕过 CVE-2026-15981 SAML Single Sign On ≤ 5.4.4 — 未认证身份验证绕过 概念验证漏洞利用 畸形签名 → opensslverify 返回 -1 → PHP 松散转换为 true → 以管理员身份调用 wpsetauthcookie 漏洞概述 描述 WordPress 的 SAML Single Sign On – SSO Login 插件在所有版本（包括 5.4.4...

Steganography-Online-Codec-JavaScript

Steganography Online Codec SDK for JavaScript & NPM Steganographic Online Codec allows you to hide a password encrypted message within the images & photos using AES encryption algorithm with a 256-bit PBKDF2 derived key. You can use it for free at:...

Exploit for CVE-2026-84645

CVE-2026-84645 — Jenkins PersistenceRoot Deserialization RCE...

HydraDragonAV-Mobile

🐉 HydraDragonAV Mobile Advanced Android Antivirus With Threat Protection ⚠️ Project on hold. This project did not get enough interest, so I have paused it for a while. Development has moved to HydraDragonAntivirus. Discord Community Server: https://discord.gg/7XMCuj5mbP Logo made by discord user...

OESA-2026-3704 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The lengt...