MAL-2026-17613 Malicious code in utxo-set-utils (RubyGems)

RubyGems runs this gem's native extension script ext/utxo-set-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

ALSA-2026:75673 Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

RHEL 9 : mariadb-connector-c (RHSA-2026:75673)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75673 advisory. The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariad...

RHEL 8 : mariadb-connector-c (RHSA-2026:75674)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75674 advisory. The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariad...

TEST-CVE-2023-32233

Use-After-Free en Netfilter nftables al procesar solicitudes por lotes Detalles de la vulnerabilidad El código afectado se origina del kernel oficial de Linux de https://kernel.org/ y es parte del componente Netfilter nftables net/netfilter/nftablesapi.c. Netfilter nftables permite actualizar su...

CVE-2024-26144-test

CVE-2024-26144-test Requisito: Docker Compose Deno $ deno run --allow-run --allow-net check.ts Si quieres probar CDN, por favor establece la URL en el argumento. ¡Asegúrate de purgar todas las cachés antes de ejecutar! $ deno run --allow-run --allow-net check.ts https://example.com/ Resultados Si...

CVE-2023-43208_Detection_PoC

CVE-2023-43208DetectionPoC Usar java.net.InetAddress para la detección POST /api/users HTTP/1.1 Host: ip:8443 User-Agent: Mozilla/5.0 X11; CrOS x8664 14541.0.0 AppleWebKit/537.36 KHTML, like Gecko Chrome/120.0.0.0 Safari/537.36 Connection: keep-alive Content-Length: 1964 Content-Type:...

SocialEngineering-Templates

SocialEngineering-Templates plantillas del framework SET...

CVE-2026-88038

A flaw was found in the cookies Node.js library. This vulnerability allows a remote attacker to inject additional cookie attributes into the Set-Cookie header by providing untrusted data to the domain or path options. This occurs because the library's validation for these options is permissive,...

CVE-2026-100381

CVE-2026-100381: DOM XSS in Flickr collection and set titles Reporter: Marco Paciaroni BomboBombone. UploadWizard inserted Flickr collection and set titles through an API that interpreted strings as HTML. External title metadata could therefore become executable markup in the wiki page. Affected...

CVE-2024-23339

CVE-2024-23339 Resumen de la vulnerabilidad CVE-2024-23339 CVSS : 6.5 23 de enero de 2024 ProtoType Pollution en el paquete node.js Parte del proyecto rebob Descripción de la vulnerabilidad avisos de GitHub hoolock es un conjunto de utilidades ligeras diseñadas para mantener una huella pequeña...

Exploit for CVE-2026-92592

CVE-2026-92592: Craft CMS authenticated RCE Proof of concept...

PT-2026-104550

Name of the Vulnerable Software and Affected Versions Burst Statistics – Simple WordPress Analytics Google Analytics Alternative versions prior to 3.7.2 Description Improper authentication allows for account persistence. The maybe load shared dashboard handler issues a genuine WordPress session...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k8sgpt, k9s, cert-manager-cmctl, flux-helm-controller, gitness, helm-push, kargo, kube-arangodb, xeol, kyverno-notation-aws, manifest-tool, helm-set-status, maru, tigera-operator, rancher-helm, opentofu, helm-mapkubeapis, cluster-api-helm-controller...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: k8sgpt, k9s, cert-manager-cmctl, flux-helm-controller, gitness, helm-push, kargo, kube-arangodb, xeol, kyverno-notation-aws, manifest-tool, helm-set-status, maru, tigera-operator, rancher-helm, opentofu, helm-mapkubeapis, cluster-api-helm-controller...

Security Bulletin: Vulnerability in immutable bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the immutable library, which is affected by a denial of service vulnerability. CVE-2026-59879, CVE-2026-59880. Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION: Immutable.js provides many Persistent Immutable data...

PT-2026-104090

The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing management actions, allowing authenticated attackers with subscriber-level access and above to set metadata on posts they do not own, including...

PT-2026-104080

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...