slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

CVE-2024-21626

CVE-2024-21626 Exploit Working Directory docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Important is to put -w /proc/self/fd/8\ Access the host filesystem using cat ../../../../../../../../../etc/passwd inside the container Exploit Symlink 1. docker run --name...

org.cowpoop.moooooo

org.cowpoop.moooooo Android APK Based On Public Information Using DirtyCOW CVE-2016-5195 Exploit THIS IS A CURRENTLY A NON-WORKING APPLICATION I WILL REMOVE THIS ONCE TESTING IS SUCCESSFUL...

CVE-2024-21626

CVE-2024-21626 For detailed explanation for this vulnerability, plz refer to my article. Exploit Exploit via Running a Container No need to build a custom image, just run a container with -w parameter: docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Exploit via Execin...

CVE-2021-3345

CVE-2021-3345 Actual working exploit for CVE-2021-3345...

CVE-2024-21262

RECORDS Only for reproduction of CVEs. Related Resources: LINK GITHUB1 GITHUB2 ISSUE Check Envs Download docker-24.0.6.tgz from https://download.docker.com/linux/static/stable/x8664/. sudo mkdir -p /usr/local/docker-24.0.6 sudo tar -xzf docker-24.0.6.tgz -C /usr/local/docker-24.0.6 sudo ln -sf...

CVE-2023-23946-POC

CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023-23946 The CVE-2023-23946 vulnerability is caused by a flaw in the way git handles symbolic links. When git creates a symbolic link, it doesnt actually handle it as a symbolic link and because of that we can exploit it to point to file...

CVE-2024-21626

about Steps to reproduce ensure kernal = 5.4,4.19,.. and there is openat2 in /proc/kallsyms. v1.0.0-rc93= runc =1.1.11 $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2 ffffffffa666dea0 t dosysopenat2...

CVE-2025-56383

Vulnerability Attack Type: DLL Hijacking DLL Hijacking Target Application: Notepad++ Method: The NppExport.dll file is loaded by Notepad++ from the working directory Implementation The malicious DLL contains: Exported functions of the original library to ensure compatibility Reverse shell...

Linux Distros Unpatched Vulnerability : CVE-2026-93325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under...

Malware in working-today--empire-takeover-h-a-c-k-gen-erat-or-akcp8z

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-119673 mongofiles may write outside the working directory through a symlink

MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output paths for getregex. An unauthorized user who can both upload a GridFS file and place a symlink in the operator's download working directory can cause a later retrieval to create a file...

Malicious code in @goparrot-dashboard/homepages (npm)

@goparrot-dashboard/homepages is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name. Version...

Malicious code in @goparrot-dashboard/franchise-management (npm)

@goparrot-dashboard/franchise-management is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name...

MAL-2026-18499 Malicious code in @goparrot-dashboard/franchise-management (npm)

@goparrot-dashboard/franchise-management is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name...

Malicious code in @goparrot-dashboard/franchise-menu-settings (npm)

@goparrot-dashboard/franchise-menu-settings is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same...

MAL-2026-18319 Malicious code in @sxm-web/client-sdk-core (npm)

@sxm-web/client-sdk-core is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 0.0.1, 1.0.0, 1.0.1, 2.0.0, 1.1.0, 3.0.0, 13.3.7 has a postinstall script th...

CVE-2026-84914

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

CVE-2026-84914

The Calculate Working Days Drupal module (versions 0.0.0 to 2.0.3 ) is vulnerable to a Missing Authorization flaw (CWE-862 ). The module fails to sufficiently restrict access to its settings form , which allows for Forceful Browsing . An attacker could potentially access and modify configuration ...