litespeed-cache-xss-poc

PoC de XSS en LiteSpeed Cache PoC de vulnerabilidad XSS en el plugin LiteSpeed Cache de WordPress que permite escalar privilegios. Esta vulnerabilidad fue corregida en la versión 5.7.0.1 del plugin y se le asignó CVE-2023-40000. Según la página de vista avanzada del plugin, aproximadamente el 35%...

WordPress Cache Enabler plugin < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion vulnerability

Unauthenticated Arbitrary File and Directory Deletion vulnerability discovered by Jakub Herman in WordPress Plugin Cache Enabler versions 1.8.17...

CVE-2025-69581

CVE-2025-69581 Chamillo LMS 1.11.2 中发现了一个问题。Social Network /personaldata 端点在注销后仍然暴露完整的敏感用户信息，因为缺少适当的缓存控制。使用浏览器后退按钮会恢复所有个人数据，允许同一设备上的未经授权用户查看机密信息。这导致用户画像分析、身份冒充、定向攻击以及严重的隐私风险。发现者：Rivek Raj Tamang RivuDon，印度锡金。 受影响产品：Chamilo LMS 受影响版本：1.11.2 发现者：Rivek Raj Tamang RivuDon，印度锡金 漏洞详情 信息泄露 摘要 该漏洞允许未经授权访...

CVE-2026-96577

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

CVE-2026-96577 Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

CVE-2026-96577 Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

EUVD-2026-90590

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

CVE-2026-96577

A vulnerability exists in oc-mirror (specifically identified in release-4.21 ) where the embedded local cache registry binds to all network interfaces during mirroring operations. The service lacks authentication and encryption , failing to restrict access to the local system. An unauthenticated ...

Hybrid Submit

Hybrid Analysis 批量提交脚本 该 Python 脚本可递归扫描文件夹，并将可执行文件、脚本、文档及其他相关文件 提交至 Hybrid Analysis（Falcon Sandbox）进行自动化恶意软件分析。 功能特点 递归遍历目录 仅提交支持的文件类型（参见下方列表） 跳过空文件、过大文件及已提交过的文件 防止路径遍历攻击 – 确保文件位于扫描根目录内 跳过符号链接 – 避免重复或非预期的提交 使用持久的 requests Session 实现高效的 API 通信 在专用用户目录 （/.hybridanalysissubmitter/）中存储缓存，避免污染扫描文件夹 使用...

PoC-CVE-2020-9715

CVE-2020-9715 EDR 验证 PoC Adobe Acrobat Reader DC 的 EScript.api ESObject 缓存中存在释放后使用漏洞。仅限授权红队进行EDR测试。 漏洞 Adobe Acrobat Reader DC = 2020.009.20063。EScript 引擎缓存数据 ESObject 时，使用的键保留了原始编码（ANSI 或 Unicode）。删除操作始终构造 Unicode 键，因此 ANSI 命名的条目永远不会从缓存中清除。在 GC 释放底层对象后，过期的缓存条目变成悬空指针。 PoC 的功能 1. 在 PDF 中嵌入一个具有 ANS...

CVE-2026-19253

The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in its cache purge routine, and does not confine the resulting deletion to the cache directory, allowing unauthenticated users to delete arbitrary files and directories on sites whe...

EUVD-2026-90508

The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in its cache purge routine, and does not confine the resulting deletion to the cache directory, allowing unauthenticated users to delete arbitrary files and directories on sites whe...

CVE-2026-19253 Cache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_url

The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in its cache purge routine, and does not confine the resulting deletion to the cache directory, allowing unauthenticated users to delete arbitrary files and directories on sites whe...

CVE-2026-19253 Cache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_url

The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in its cache purge routine, and does not confine the resulting deletion to the cache directory, allowing unauthenticated users to delete arbitrary files and directories on sites whe...

CVE-2026-19253

The Cache Enabler WordPress plugin before version 1.8.17 is vulnerable to an unauthenticated arbitrary file and directory deletion vulnerability. The root cause is a failure to validate a URL before using it to build a filesystem path within the cache purge routine . Because the plugin does not c...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — 研究笔记 概述 该仓库包含一个经过清理的技术示意图和辅助笔记，用于描述通常被称为 Dirty Frag 且针对 xfrm-ESP 路径被追踪为 CVE-2026-43284 的 Linux 内核漏洞。 该问题属于由 Hyunwoo Kim（@v4bel）发现的更广泛的 Dirty Frag 类别。一个相关的 RxRPC 变体被单独追踪为 CVE-2026-43500 。 本材料的目的是： 在系统层面解释漏洞机制； 记录 XFRM ESP、UDP 封装、splice、skb 片段、文件支持页以及页缓存损坏之间的关系；...

CVE-2026-43284-dirtyfrag-detection

DirtyFrag CVE-2026-43284 PoC 验证与 auditd 检测 范围： 针对 CVE-2026-43284 的 XFRM/ESP 路径的 Linux 本地权限提升（LPE）验证。 该仓库包含一份英文报告以及从公开 DirtyFrag PoC 的受控实验室验证中提取的证据工件。重点不在于提供利用指南，而在于记录 Linux 审计日志中可见的事件，以及如何将这些事件转化为实用的 SOC 检测逻辑。 完整 PDF 报告： EN: reports/DirtyFragCVE-2026-43284EN.pdf PL:...

CVE-2026-43284-DIRTY-FRAG-

CVE-2026-43284-DIRTY-FRAG- Análisis técnico detallado de la vulnerabilidad de escalada de privilegios local CVE-2026-43284 Dirty Frag en el kernel de Linux. CVE-2026-43284 comúnmente referida como parte de la suite de vulnerabilidades Dirty Frag es una falla crítica de escalada de privilegios loc...

SUSE CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

SUSE CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...