EUVD-2025-209822

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getticketcontentcallback' function in all versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to view any...

EUVD-2025-209819

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the createadvertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - Ejecución SQL Arbitraria no Autenticada a Ejecución Remota de Código CVE-2024-43918 El plugin WBW Product Table Pro para WordPress es vulnerable a la ejecución SQL arbitraria no autorizada debido a la falta de verificación de capacidades en una función en...

capa

Sitio web | Descargar | Interfaz web capa detecta capacidades en archivos ejecutables. Lo ejecutas contra un PE, ELF, módulo .NET, shellcode o un sandbox report y te dice lo que cree que el programa puede hacer. Por ejemplo, puede sugerir que el archivo es un backdoor, es capaz de instalar...

capslock

Capslock is a capability analysis CLI for Go packages that informs users of which privileged operations a given package can access. This works by classifying the capabilities of Go packages by following transitive calls to privileged standard library operations. The recent increase in supply chai...

defenseclaw

/ \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Gobernanza de seguridad para OpenClaw y runtimes de IA agéntica. Escanea capacidades antes de usarlas, inspecciona el tráfico en tiempo de...

amla-sandbox

amla-sandbox Este repositorio es la fuente de lanzamiento del paquete Python amla-sandbox. El desarrollo ocurre en el monorepo de amlalabs; este repositorio se actualiza en el lanzamiento. El runtime Rust que compila a amlasandbox.wasm vive en amla-sandbox-core; la etiqueta de lanzamiento exacta...

fil-c

Fil-C 0.686 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

mcpguard-dynamic

MCPGuard-Dynamic Sandboxing a nivel de kernel para llamadas a herramientas de agentes LLM realizadas a través del Protocolo de Contexto de Modelo MCP. MCPGuard actúa como un proxy transparente entre un cliente MCP el agente / ejecutor y un subproceso de servidor MCP, aplicando tres capas de defen...

TransitionPlayer

This issue has been fixed for Android 14+ in June 2026 Android Security Bulletin. Click here to see the patch Writeup TODO I'll complete the writeup when I got a little free time But before that I have to fight against school work and exams I decided to complete the section before exams are...

CVE-2020-0796-Scanner

SMBGhostscanner Escáner simple para CVE-2020-0796 - SMBv3. El escáner está destinado únicamente a probar si un servidor es vulnerable. No está pensado para investigación o desarrollo, de ahí el payload fijo. Comprueba el dialecto SMB 3.1.1 y la capacidad de compresión mediante una solicitud de...

CVE-2021-3493

CVE-2021-3493 Escalada local de privilegios en OverlayFS de Ubuntu Versiones afectadas Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Uso gcc exploit.c -o exploit ./exploit Descripción Problema específico de Ubuntu en el sistema de archivos overlayfs...

evilTrust

evilTrust Herramienta ideal para el despliegue automatizado de un Rogue AP con capacidad de selección de plantilla + 2FA. Esta herramienta dispone de varias plantillas a utilizar, incluyendo una opción de plantilla personalizada, donde el atacante es capaz de desplegar su propia plantilla...

make-trust-irrelevant

Hacer que la Confianza sea Irrelevante La pared no pregunta quién toca. TLDR: Construí un muro a nivel de kernel para agentes, scripts y procesos de espacio de usuario comprometidos que no son de confianza. El objetivo es hacer que clases enteras de efectos privilegiados no autorizados fallen de...

CVE-2026-102583

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

CVE-2026-102584

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...

CVE-2026-102579

A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the same course that they should not have permission to view. This issue leads to unauthorized information disclosure...

CVE-2026-102584 Moodle: missing capability check allows unauthorised grade penalty recalculation

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...

EUVD-2026-89723

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...

CVE-2026-102584

A flaw in Moodle allows a low-privileged authenticated user to bypass permission requirements due to a missing capability check . This vulnerability enables unauthorized users to trigger the recalculation of grade penalties , which can result in the modification of grade penalty records and the p...