supply-chain-guard

Supply Chain Guard SCG Un kit de herramientas de respuesta a incidentes para ataques a la cadena de suministro de npm/yarn y Python pip/poetry/uv — gratuito, local, sin dependencias. SCG no es un motor de escaneo que compite con herramientas comerciales en cobertura. Es una habilidad de Claude Co...

CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL Eliminación de PPL mediante BYOVD para 24H2 y 25H2 Una escritura de memoria arbitraria en el manejador del IOCTL 0x12C807 METHODNEITHER de Wise System Monitor v1.5.3.127 permite a los atacantes provocar la eliminación de PPL o una denegación de servicio DoS mediante un...

SynGhost

Syntactic-Ghost SynGhost SynGhost: Ataque de puerta trasera invisible y universal agnóstico a la tarea mediante transferencia sintáctica Contribuciones y características SynGhost tiene las siguientes contribuciones Para mitigar los riesgos de las puertas traseras agnósticas a la tarea existentes,...

Rubrics-as-an-Attack-Surface

Rúbricas como superficie de ataque: Deriva de preferencias sigilosa en jueces LLM 📊 Dataset • 🤖 Modelos entrenados • 📝 Artículo • 💻 Repositorio Este repositorio contiene el código del artículo Rubrics as an Attack Surface: Stealthy Preference Drift in LLM Judges de Ruomeng Ding, Yifei Pang, He Su...

copy-fail-checker

Comprobador de Copy Fail — CVE-2026-31431 Un pequeño script Bash con pocas dependencias que te indica si tu sistema Linux está expuesto a la vulnerabilidad de escalada de privilegios local Copy Fail CVE-2026-31431. El script es de solo lectura : nunca explota el fallo, nunca carga módulos del...

CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102264

A cross-site scripting (XSS) vulnerability exists in the Edit Profile Feature of mwasikz robo-cafe-rms (affected up to commit 228c44a02823f04e85db32b7137809a2856148fc). The flaw is located within an unknown function in the frontend/update-account.php file, where manipulating the Name , Address , ...

EUVD-2026-88640

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

CVE-2026-97567

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition can occur between socket disconnection and packet retransmission timer handling, resulting in an inconsistent socket state. A local user can exploit this timing flaw during active connection teardown to cause a...

chub-supply-chain-poc

PoC de Cadena de Suministro de Context Hub Vulnerabilidad de desinfección cero enContext Hub @aisuite/chub v0.1.3 permite la inyección silenciosa de dependencias a través del pipeline de documentación MCP. Referencias: CWE-94 Inyección de Código | CWE-829 Esfera de Control No Confiable | CWE-345...

CVE-2026-102247

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102248

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might b...

CVE-2026-102249

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-102245

A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsensebackend/app/routes/circlebackwebhookroute.py of the component circleback Endpoint. Executing a manipulation can lead to missing authentication. The attack can be...

CVE-2026-102263 mwasikz robo-cafe-rms manage-food.php unrestricted upload

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2026-102263

A vulnerability exists in mwasikz robo-cafe-rms up to commit 228c44a02823f04e85db32b7137809a2856148fc . An unknown function within the manage-food.php file allows for unrestricted upload , which can be triggered remotely. While the exploit has been disclosed to the public and may be used, specifi...

EUVD-2026-88631

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

Cyber-Defenders-lab-

Laboratorios Blue Team de CyberDefenders Mis informes de los laboratorios Blue Team de CyberDefenders, resueltos con Wireshark. Cada laboratorio es una investigación real de análisis forense de red, que comienza con un archivo PCAP y termina con la reconstrucción completa del ataque. 📄 Informe PD...

whisperpair-poc-tool

WhisperPair-PoC-Tool e Investigación Un análisis profundo de CVE-2025-36911 y las brechas de seguridad en el ecosistema Fast Pair de Google Blog Post Resumen Ejecutivo Google Fast Pair fue diseñado para hacer que el emparejamiento Bluetooth sea fluido: toca una notificación y estás conectado. Per...