kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

CVE-2024-28000

CVE-2024-28000 Exploit de CVE-2024-28000 para litespeed-cache =6.3 permite la escalada de privilegios con creación de una cuenta de administrador Compilación git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . Descargo de responsabilidad Este PoC tiene fines...

TP-Link-WDR-Router-Command-injection_POC

Este repositorio no tiene un README...

CVE-2023-25690-POC

CVE 2023 25690 - Prueba de concepto Publicado: 7 de marzo de 2023 Puntuación base| Confidencialidad| Impacto de integridad| Impacto de disponibilidad ---|---|---|--- 9.8| Alto| Alto| Alto Tabla de contenidos Descripción del aviso Desglose de la configuración vulnerable de Apache Flujo de datos...

CVE-2019-13288-POC

CVE-2019-13288-POC xpdf/install/bin/pdftotext ./poc.pdf En Xpdf 4.01.01, la función Parser::getObj en Parser.cc puede causar una recursión infinita mediante un archivo manipulado. Un atacante remoto puede aprovechar esto para un ataque de denegación de servicio. Esto es similar a CVE-2018-16646...

CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules

CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules CVE-2026-33057 - PoC de RCE no autenticado en Mesop y reglas yara Realísticamente, no estoy seguro de si funcionará, probablemente no funcione, pero inténtalo de todos modos... BİO y DONACIONES: https://guns.lol/hackpatato perfil de cv...

CVE-2023-5178

CVE-2023-5178 El exploit para la vulnerabilidad CVE-2023-5178: NVMe-oF-TCP, que es un error de lógica en el controlador NVMe-oF-TCP durante el manejo de una Initialize Connection Request corrupta. Conduce a un doble-free con condición de carrera en kmalloc-96 , que puede explotarse para obtener L...

CVE-2026-94159

The KlbTheme Total Donations WordPress plugin (versions

CVE-2026-94668

The Dimitri Grassi Salon booking system WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in versions 10.31.5 and earlier . The root cause is the Improper Neutralization of Input During Web Page Generation (CWE-79). This vulnerability allows an attacker to execute arbitrary s...

CVE-2026-94667

The Crocoblock JetReviews WordPress plugin (versions up to and including 3.1.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This is caused by the improper neutralization of input during web page generation . The vulnerability allows an attacker to inject malicious scripts that are store...

EUVD-2026-95618

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10...

CVE-2026-94166 WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44...

CVE-2026-95609 WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

CVE-2026-94568

The Pay with Vipps for WooCommerce (woo-vipps ) WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This flaw affects versions up to and including 6.2.0 . An attacker can exploit this vulnerability to perform object injection, potentially leading ...

EUVD-2026-95600

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0...

CVE-2026-94568 WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0...

CVE-2022-1040

CVE-2022-1040 que el PoC te acompañe Encontrado por ahí curl --insecure -H "X-Requested-With: XMLHttpRequest" -X POST 'https://x.x.x.x/userportal/Controller?mode=8700&operation=1&datagrid=179&json="🦞":"test"'...

CVE-2024-0015

CVE-2024-0015 demostración de PoC y EXP de DubheCTF...

react2shellpoc

Este repositorio contiene una prueba de concepto que demuestra cómo se comporta una clase específica de vulnerabilidades de React Server Component dentro de un entorno de formación controlado y legal. Manual ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ ||...