CVE-2026-19902

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress (versions up to and including 2.8.18 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping on the {search-query} dynamic tag. The replace_ai_tags() function in...

CVE-2026-19902 Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Referer header in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping on the 'search-query' dynamic tag. When an ad block's code...

CVE-2026-54121-CertiGhost

CVE-2026-54121 Certighost - fork corregido Un fork funcional de la herramienta de prueba de concepto para CVE-2026-54121, también conocida como Certighost. Investigación original y PoC por @H0j3n y @aniqfakhrul , con análisis detallado en:...

webrtc-ips

Solicitudes de direcciones IP STUN para WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Qué hace esto Firefox y Chrome han implementado WebRTC, que permite realizar solicitudes a servidores STUN que devuelven las direcciones IP locales y públicas del usuario. Los resultados de estas solicitude...

latma

Herramienta de análisis de movimiento lateral El analizador de movimiento lateral LATMA recopila registros de autenticación del dominio y entornos de Azure AD y busca posibles ataques de movimiento lateral y actividad sospechosa. El movimiento lateral puede ocurrir en el entorno de AD o entre la...

Rocky Linux 8 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc (crlsa-2021_5142)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20215142 advisory. samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets CVE-2020-25719 Tenable has extracted the preceding description block directly from the...

Rocky Linux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785345275)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785345275 advisory. - A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches th...

CentOS Linux 7 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1785845028)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1785845028 advisory. - A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the enti...

CVE-2026-97077

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.18 versions...

CVE-2026-97077 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.18 versions...

EUVD-2026-89895

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.18 versions...

CVE-2026-97077

The WordPress Ad Inserter plugin (versions

CVE-2026-97077 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.18 versions...

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1778879662)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778879662 advisory. - A vulnerability was found in Samba's rpcecho development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This...

Rocky Linux 9 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc (crlsa-2025_20954)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520954 advisory. sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems CVE-2025-11561 Tenable has extracted the preceding description blo...

AlmaLinux 9.2 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (ALMALINUX9.2:CLSA-2026:1778766810)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778766810 advisory. - The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a...

gopacket

gopacket Por Jacob Paullus @psycep Una implementación completa en Go de Impacket - 63 herramientas y 24 paquetes de biblioteca para la interacción con protocolos de red de Windows, enumeración de Active Directory y ejecución de ataques. Construido como un framework nativo de Go para que puedas...

CVE-2022-26923

CVE-2022-26923 – Exploit Certifried Abuso de AD CS Explotación automatizada de CVE-2022-26923 Certifried , permitiendo escalada de privilegios mediante el abuso de Servicios de Certificados de Active Directory AD CS, con un fallback automático a Delegación Restringida Basada en Recursos RBCD, y...

Metasploit-CVE-2026-54121-Certighost

Metasploit-CVE-2026-54121-Certighost Certighost fue descubierto y explotado originalmente por h0j3n y Aniq Fakhrul. Este repositorio contiene un módulo auxiliar de Metasploit que escala desde cualquier usuario de dominio con bajos privilegios hasta el compromiso total del dominio abusando del...

WS_FTP Server - Insecure Deserialization

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. id: CVE-2023-40044 info: name: WSFTP Server - Insecure...