CVE-2025-55182-PoC

CVE-2025-55182-PoC PoC per CVE-2025-55182 root@kitploit: Usage: python3 poc.py -u http://target.com --cmd "" Dichiarazione di non responsabilità legale Questo strumento è fornito solo per scopi educativi e test di sicurezza autorizzati. L'utilizzo di questo strumento per attaccare bersagli senza...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

CVE-2026-69083_exploit

CVE-2026-69083 — Iniezione SQL non autenticata in SiYuan Iniezione SQL non autenticata in SiYuan un'applicazione knowledge-base basata su Go tramite l'endpoint di ricerca asset-content. POST /api/search/fullTextSearchAssetContent costruisce un'istruzione SQL grezza concatenando il valore query...

CVE-2021-26084

CVE-2021-26084 Versioni interessate Versione 6.13.23 6.14.0 ≤ Versione 7.4.11 7.5.0 ≤ Versione 7.11.6 7.12.0 ≤ Versione 7.12.5 Causa, metodo di sfruttamento Confluence utilizza un framework per mappare gli URL alle classi Java, creando quelli che vengono chiamati “action”. Gli URL delle action...

OptionsBleed-POC-Scanner

OptionsBleed-POC-Scanner OptionsBleed CVE-2017-9798 PoC / Scanner Maggiori informazioni in arrivo... Esclusione di responsabilità Questo software è stato creato esclusivamente a scopo di ricerca accademica e per lo sviluppo di tecniche difensive efficaci, e non è inteso per essere utilizzato per...

CVE-2022-20474

Analisi di CVE-2022-20474 — Self-changed Bundle in LazyValue Introduzione Nota: prima di leggere questo articolo, dovreste avere una conoscenza di base delle vulnerabilità Bundle Mismatch. Se non avete ancora letto i seguenti riferimenti, vi consiglio di farlo: 1. Bundle Feng Shui — Analisi...

CVE-2021-22205

CVE-2021-22205 Lo strumento RCE per CVE-2021-22205 è fornito solo a scopo di condivisione e scambio di informazioni. Non utilizzarlo per test non autorizzati; in caso contrario, l'autore declina ogni responsabilità. root@kitploit: -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool...

CVE-2017-10271

LAB 2 - CVE-2017-10271: Writeup sulla deserializzazione XMLDecoder di WebLogic I. Analisi del Sistema Analisi dei Log di Sistema Servizio Rilevato: Oracle WebLogic Server AdminServer appartenente a basedomain in esecuzione in Development Mode. Porta di Connessione: 7001. Protocolli Supportati:...

CVE-2021-42292

CVE-2021-42292 Dieses Paket erkennt Exploits von CVE-2021-42292, einer lokalen Privilegieneskalationsschwachstelle in Microsoft Excel, und erzeugt einen Eintrag in notice.log. https://corelight.com/blog/detecting-cve-2021-42292 Erkennungsmethode: Das Paket erkennt die Schwachstelle, wenn die...

limitrr-php

Limitação de taxa leve dentro do PHP usando Redis. O Limitrr PHP é muito inspirado na minha outra biblioteca, Limitrr, que foi criada para NodeJS. Confira aqui O Limitrr PHP permite que os usuários integrem facilmente a limitação de taxa em sua aplicação. Diferente de outros pacotes similares, es...

CVE-2026-80713 io_uring: preserve task restrictions across exec

In the Linux kernel, the following vulnerability has been resolved: iouring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. Once installed, they should not be dropped across exec. For a task that has used iouring, the exec cancellation path call...

CVE-2026-80713

CVE-2026-80713 affects the io_uring subsystem of the Linux kernel . Per-task restrictions, once installed, are intended to persist across exec and apply to all rings created by that task. However, the exec cancellation path incorrectly called __io_uring_free(), which released both the task contex...

EUVD-2026-67448

In the Linux kernel, the following vulnerability has been resolved: iouring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. Once installed, they should not be dropped across exec. For a task that has used iouring, the exec cancellation path call...

CVE-2026-80701 drm/vmwgfx: enforce cursor size limits for MOB cursors

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmwcursorplaneatomiccheck bounds cursor width and height only on the legacy update path; the SVGACAP2CURSORMOB path -- the default on modern hosts -- accepts any size. When t...

EUVD-2026-67436

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmwcursorplaneatomiccheck bounds cursor width and height only on the legacy update path; the SVGACAP2CURSORMOB path -- the default on modern hosts -- accepts any size. When t...

CVE-2026-80701

CVE-2026-80701 affects the Linux kernel 's DRM/vmwgfx (VMware graphics) driver. The root cause is that vmw_cursor_plane_atomic_check() enforces cursor width/height bounds only on the legacy update path, while the SVGA_CAP2_CURSOR_MOB path—the default on modern hosts—accepts any size. When an over...

CVE-2026-80683

CVE-2026-80683 is a use-after-free bug in the Linux kernel's Bluetooth SCO (Synchronous Connection-Oriented) protocol handling. The root cause is that the SCO socket stores a pointer to the sco_conn object without holding its own counted reference. When a close() call races with the controller's ...

EUVD-2026-67559

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own scoconn reference scoconndel drops a reference it does not own. It takes one transient reference via scoconnholdunlesszero and releases it with the scoconnput that follows scosockhold; the...

CVE-2026-80683 Bluetooth: SCO: give the socket its own sco_conn reference

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own scoconn reference scoconndel drops a reference it does not own. It takes one transient reference via scoconnholdunlesszero and releases it with the scoconnput that follows scosockhold; the...

CVE-2026-80682

CVE-2026-80682 is a Linux kernel RISC-V memory-management flaw in the vmemmap_start_pfn computation during early boot (sparse_init in mm/sparse.c ). A unit mismatch was introduced when MAX_FOLIO_VMEMMAP_ALIGN—measured in bytes of struct page storage—was fed directly into VMEMMAP_ADDR_ALIGN, which...