Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlsa-2025_9877)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259877 advisory. glibc: Vector register overwrite bug in glibc CVE-2025-5702 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CVE-2026-12793

CVE-2026-12793 — Escalada de privilegios no autenticada en JetFormBuilder Prueba de concepto, escáner y exploit para CVE-2026-12793 en el plugin de WordPress JetFormBuilder — Dynamic Blocks Form Builder Crocoblock. | ---|--- CVE| CVE-2026-12793 Plugin| jetformbuilder Afectados| ≤ 3.6.2 Corregido...

SUSE CVE-2026-97407

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

CVE-2025-33207

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33207

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33207

NVIDIA Networking BlueField and ConnectX products are vulnerable to a flaw in a control register (CWE-1262). A user with VF access can send a malicious command to the firmware, resulting in improper access control for the register interface. Successful exploitation may lead to a denial of service...

EUVD-2025-211016

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33207

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

DeadDialect

DeadDialect Cada arranque habla un idioma diferente. El binario de ayer es el código muerto de hoy. Un sistema de reasignación de ISA RISC-V único por sesión. Cada vez que el sistema arranca, genera una permutación criptográfica fresca del conjunto de instrucciones. Los binarios compilados para u...

CVE-2026-98044

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This issue allows a privileged local user to cause a Denial of Service DoS or unexpected program rejection by loading a specially crafted BPF program containing legacy packet-load instructions inside callback functions. D...

CVE-2025-34077

CVE-2025-34077 Secuestro de sesión de administrador no autenticado - Plugin Pie Register ≤ 3.7.1.4 📌 Descripción Este exploit apunta a una vulnerabilidad en el plugin Pie Register de WordPress versiones ≤ 3.7.1.4, permitiendo el secuestro de sesión de administrador no autenticado. 🛡️ Esta...

CVE-2026-98142

A flaw was found in the Linux kernel's Cirrus video driver. This vulnerability can lead to a Denial of Service DoS due to missing validation of the Base Address Register BAR memory size during device initialization. An attacker capable of attaching a crafted PCI device with an undersized memory...

basalt

!DOI 10.5281/zenodo.22072811https://img.shields.io/badge/DOI-10.5281/zen...

CVE-2018-7600

CVE-2018-7600 Drupalgeddon2 Exploit – Python3 DESCARGO DE RESPONSABILIDAD: Este proyecto es solo para fines educativos y de pruebas de penetración autorizadas. NO utilice este código en sistemas que no posea o para los que no tenga un permiso escrito explícito para probarlo. El uso no autorizado ...

CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - Exploit de inyección de código mediante directiva Register maliciosa Descripción Este repositorio proporciona un exploit listo para producción para CVE-2026-65660 Control inadecuado de la generación de código, CWE-94 en Microsoft SharePoint Server. La vulnerabilidad...

CVE-2025-5548

Estudio técnico de la vulnerabilidad CVE-2025-5548 Introducción En este trabajo se analiza la vulnerabilidad CVE-2025-5548 , asociada a un desbordamiento de búfer en la pila presente en FreeFloat FTP Server v1.0. El objetivo principal del laboratorio es entender cómo se comporta una aplicación...

outlook-auto-register

Outlook Auto Register Microsoft Outlook 纯协议批量注册 · PerimeterX 打码 · Web 控制台 · 代理池 / 账号池 / 测活一体化 它解决什么 · 界面预览 · 快速开始 · 代理推荐 · 防封策略 · English · Tiếng Việt · Telegram 本仓库地址 ：lxf746/outlook-auto-register 本项目仅供学习与研究，不得用于商业违规用途。使用者需自行评估并遵守 Microsoft 服务条款，所产生的一切后果由使用者自行承担。 一句话 ：纯协议 Outlook 批量注册 + Web 控制台，...

CVE-2024-54363-Exploit

CVE-2024-54363-Exploit La vulnerabilidad de asignación incorrecta de privilegios en nssTheme Wp NssUser Register permite la escalada de privilegios. Este problema afecta a Wp NssUser Register: desde n/a hasta 1.0.0. Descripción El complemento nssTheme Wp NssUser Register para WordPress es...

CVE-2025-57428

⚠️ This repository is maintained only as a reference for CVE-2025-57428. For other advisories and updates, please refer to: security-advisories. CVE-2025-57428 - Telnet debug interface enabled by default allows low-level flash/register access Affected Product Vendor/Brand: Each Italy Device:...

CVE-2025-14440

CVE-2025-14440 JAY Login & Register = 2.4.01 - Bypass de Autenticación mediante Cookie 🚨 JAY Login & Register = 2.4.01 - Bypass de Autenticación mediante Cookie 📝 Descripción El plugin JAY Login & Register para WordPress es vulnerable a un bypass de autenticación en versiones hasta la 2.4.01...