PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit 代码执行 PoC 该仓库包含一个针对固件 6.20 的 PlayStation 4、利用 CVE-2018-4441 的概念验证（PoC）RCE 漏洞利用程序。该漏洞利用首先在 wkexploit.js 中建立任意读/写原语以及任意对象地址泄露。随后它会在 index.html 中搭建一个用于运行 ROP 链的框架，并默认提供两个用于运行测试 ROP 链的超链接——一个用于运行 sysgetpid 系统调用，另一个用于运行 sysgetuid 系统调用，以分别获取进程的 PID 和用户 ID。...

rschunter

RSC Hunter 一个强大的、多线程的扫描与利用工具，用于检测 React Server Component RSC 漏洞。该工具旨在识别和利用 RSC 实现中的 RCE 漏洞，支持多种绕过技术和策略。 注意 ：由于维护完整的交互式 shell 和其他重型特性的工作量巨大，我们决定移除它们。本项目现在严格专注于边缘情况处理、行为分析以及 RSC 漏洞的可靠检测。我们相信一个更简单、更专注的工具能更好地服务社区。 功能 多策略扫描 ：自动尝试多种利用策略（Assetnote、Msanft、Split Payload）。 多线程 ：使用并发线程快速扫描大量目标。 WAF 绕过...

CVE-2026-46331

🚨 CVE-2026-46331 - Linux 内核 COW 漏洞 Linux 内核 net/sched 部分写时复制 COW 页面缓存损坏 -orange?style=for-the-badge 一个由流量控制 tc 数据包编辑子系统中不正确的写时复制 COW 处理引起的 Linux 内核漏洞。 📖 概述 CVE-2026-46331 是一个影响 net/sched 数据包编辑 actpedit 子系统的 Linux 内核漏洞。 该漏洞产生的原因是内核在 实际数据包编辑偏移量被确定之前 就计算了可写的写时复制 COW...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

CVE-2026-86308 light0011 cms Debug Mode config.php information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

CVE-2026-86308

A remote information disclosure vulnerability exists in light0011 CMS , specifically in the Debug Mode component of the file App/Common/Conf/config.php. Manipulation of the DB_DEBUG argument allows an unauthenticated attacker to disclose information remotely. A proof-of-concept exploit is publicl...

CVE-2026-86308 light0011 cms Debug Mode config.php information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

EUVD-2026-72405

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

CVE-2026-86302

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86306

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT 反序列化 - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669是一个GoAnywhere MFT反序列化漏洞，由于反序列化一个任意攻击者控制的对象，在License Response Servlet中存在一个预先认证的命令注入漏洞。攻击者可以利用该漏洞在受影响的系统上执行任意代码，从而导致系统被完全控制。该漏洞影响版本为7.1.2之前，不包括7.1.2。 CVE-2023-0669 is a GoAnywhere MFT deserialization vulnerability that...

CVE-2026-53796

A time-of-check to time-of-use TOCTOU race condition in rsync's non-daemon receiver allows a local attacker to compromise data integrity. By substituting a symbolic link for a destination path component during directory processing, an attacker can redirect file writes to unintended locations...

CVE-2026-86306 light0011 cms Cookie Helper UserModel.class.php improper authentication

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

CVE-2026-86306 light0011 cms Cookie Helper UserModel.class.php improper authentication

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

CVE-2026-86306

light0011 CMS , a PHP-based content management system hosted on GitHub, is affected by an improper authentication flaw in the Cookie Helper component. The vulnerability resides in the file App/Home/Model/UserModel.class.php and is triggered by manipulating the Username argument. Because the flaw ...

EUVD-2026-72397

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – 通过低阶点注入绕过 IoT 固件更新签名 概述 IoT 设备的 OTA 固件验证使用了存在缺陷的 Ed25519 实现，该实现不会拒绝包含小阶分量的公钥，从而允许攻击者为恶意固件伪造有效签名。 严重性： 严重（设备持久性失陷） 模拟（Python 与 C 验证器） root@kitploit: !/usr/bin/env python3 """ forgefirmware.py - Creates a malicious firmware image with forged Ed25519 signature. We exploit that the...

OSWAP-top10-handson-practical-writeups-report

Cybersecurity Lab Write-Ups Hands-on write-ups from a local,...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules fast-uri, postcss, axios, jsonata and body-parser...

CVE-2026-86300

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...