EUVD-2026-57757

@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header...

challenge_CVE-2020-13777

Reto CVE-2020-13777 Intenta demostrar si el MITM de TLS 1.3 es posible y descifra los datos tempranos 0-RTT en el pcap aquí Servidor: 192.168.100.23:5556. Consulta https://jovi0608.hatenablog.com/entry/2020/06/13/104905 y CVE-2020-13777 para más detalles...

CVE-2023-33768

CVE-2023-33768 Descripción La verificación incorrecta de la firma del firmware durante el proceso de actualización de firmware del Belkin Wemo Smart Plug WSP080 v1.2 permite que los atacantes provoquen una Denegación de Servicio DoS a través de un archivo de firmware manipulado. Información...

Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

Summary Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in some cases. Details https://github.com/XTLS/Xray-core/blob/45cf2898ab12e97a55dd8f1f3d78d903340bdc9e/transport/internet/tls/config.goL333-L347 If r.Config.ServerName is empty, DNSName will be empty...

GHSA-5WF9-H793-W73C Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

Summary Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in some cases. Details https://github.com/XTLS/Xray-core/blob/45cf2898ab12e97a55dd8f1f3d78d903340bdc9e/transport/internet/tls/config.goL333-L347 If r.Config.ServerName is empty, DNSName will be empty...

CVE-2021-25253

Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 Cliente de Trend Micro OfficeScan: Las versiones icacls "C:\Program Files x86\Trend Micro\OfficeScan Clien...

CVE-2025-55234

CVE-2025-55234 Esta vulnerabilidad permite a los atacantes realizar ataques de retransmisión contra el protocolo SMB Server Message Block. Si tiene éxito, puede conducir a una elevación de privilegios EoP, permitiendo esencialmente que usuarios no autorizados obtengan acceso de mayor nivel en un...

CVE-2024-1086

CVE-2024-1086 Con fines educativos. Referencias: https://pwning.tech/nftables/ https://github.com/Notselwyn/CVE-2024-1086 Kconfig: +CONFIGCONFIGFSFS=y +CONFIGSECURITYFS=y +CONFIGNFTABLES=y mnlcbrun: Operation not supported +CONFIGNETFILTERNETLINKGLUECT=y +CONFIGNETLINKDIAG=y +CONFIGNFTCT=y...

SupplyChainAttacks

Firmware Supply Chain Attacks This repository provides a curated and comprehensive collection of documented firmware supply chain attacks discovered or investigated by Binarly REsearch team. Maintained by Binarly, the project serves as an educational and reference resource for cybersecurity...

CVE-2024-0582-dataonly

CVE-2024-0582 Un ataque solo de datos basado en CVE-2024-0582 Descripción El exploit sigue la estrategia de esta publicación de blog, excepto que no usé un proceso hijo para abrir archivos. Encontré algunos exploits en GitHub que siguen la estrategia de este artículo. Después de reproducir el...

CVE-2026-8054

1. Resumen de la vulnerabilidad CVE-2026-8054 es una vulnerabilidad crítica de inyección SQL sin autenticación previa Pre-auth SQL Injection que existe en la API de Auditoría de Publicación Publish Audit API de dotCMS Core. Esta vulnerabilidad es rastreada oficialmente como incidente de seguridad...

CVE-2026-82042 UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter

UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access by presenting a valid Utm-Internal-Key header matching the INTERNALKEY environment variable value, which the InternalApiKeyFilter accepts for any endpoint...

CVE-2026-103918 @orpc/zod: Prototype injection in smart coercion

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.10, the @orpc/zod ZodSmartCoercionPlugin and experimentalZodSmartCoercionPlugin collect object and record properties in plain objects and resolve shape keys through the prototype chai...

CVE-2020-10129

CVE-2020-10129 - El producto SearchBlox anterior a V-9.2 es vulnerable a Escalada de Privilegios: el usuario de menor privilegio puede acceder a Admin Descripción del producto: SearchBlox simplifica la búsqueda empresarial para organizaciones complejas. Las herramientas intuitivas e inteligentes ...

CVE-2026-103036

The oRPC tool (specifically the @orpc/json-schema SmartCoercionPlugin ) is vulnerable to a prototype injection issue in versions prior to 1.14.9 . The root cause is the use of JsonSchemaCoercer to resolve schema.properties entries through the prototype chain. A remote client can supply __proto__ ...

CVE-2026-66081

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted...

CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted...

retbleed-speculative-execution-poc

Retbleed: Ejecución Arbitraria de Código Especulativo mediante Desbordamiento del RSB Una reproducción práctica de Retbleed CVE-2022-29900 / CVE-2022-29901 — el ataque microarquitectónico de 2022 que rompió la defensa "Retpoline" al demostrar que las instrucciones ret, consideradas seguras durant...