CVE-2026-90455

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

SBOM-VEX-Taint-Analysis

SBOM → VEX Agent Genere automáticamente documentos CycloneDX VEX firmados a partir de SBOM utilizando un pipeline de IA multiagente seguro, construido de acuerdo con las directrices del proyecto OWASP GenAI Security. El Problema Generar un SBOM revela cientos de CVEs. En la práctica, más del 90% ...

ida-pro-mcp

IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...

beebug

beebug - Una herramienta para verificar la explotabilidad Descripción beebug es una herramienta que se puede utilizar para verificar si un fallo de programa podría ser explotable. Esta herramienta se presentó por primera vez en r2con 2018 en Barcelona. Algunas funcionalidades implementadas son:...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

Mage AI - Insecure Default Authentication Setup

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

cpanel_xss_2023

Sobre la Herramienta ⚒️ cpanelxss2023 es un script simple de Python diseñado para encontrar la vulnerabilidad CVE-2023-29489 y su explotabilidad en cpanel. Características ⚙️ Escaneo de CVE-2023-29489: Identifica y escanea la vulnerabilidad y explotación de CVE-2023-29489. Entrada de URL: Admite...

log4j2-rce-recap

Pequeño resumen de la ejecución remota de código en log4j2 CVE-2021-44228 Requisitos maven = 3 java = 8 no ejecutar ldap en 127.0.0.1:1389 Uso Construir con maven. root@kitploit: mvn test El plugin surefire se ejecutará dos veces: ExploitabilityTest demuestra la explotabilidad del error...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

test-cve-2016-1000027

test-cve-2016-1000027 validation of the exploitability of a CVE...

sbom-sentinel

sbom-sentinel !CIhttps://github.com/MUGHEESM/sbom-sentine...

vulnseeker

🔍 VulnSeeker Smart CVE search with exploitability context a...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE starting from 11.9 does not properly validate image files that were passed to a file parser, resulting in a remote command execution vulnerability. This template attempts to passively identify vulnerable versions of GitLab without the need for an exploit by matching unique hashes for...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed an out-of-bounds write operation through a compressed name in rdatacopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

Astra Linux – Vulnerability in Firefox and Thunderbird

It is currently unknown whether this issue is exploitable. However, there is a possibility that the structured cloning of certain objects could lead to memory corruption. This vulnerability affects Firefox 131, Firefox ESR 128.3, Thunderbird 128.3, and Thunderbird 131...

Linux Distros Unpatched Vulnerability : CVE-2026-72264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: tridentfb: fix potential memory leak in tridentpciprobe In tridentpciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed in...

CVE-2026-19893

The CVE-2026-19893 entry affects D-Link DIR-842 (firmware 2.01.B04) via the vsftpd component, specifically manipulating the /etc/vsftpd.conf file to cause incorrect default permissions. The vulnerability is exploitable remotely with high attack complexity and low exploitability assessment, though...

PT-2026-72886

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-WLC100 version 2.05b02 Description An issue exists in the IKE Phase 1 Aggressive Mode component within the /etc/racoon.conf file. Manipulation of the exchange mode argument leads to a failure in encrypting sensitive data. This fla...

PT-2026-73041

Name of the Vulnerable Software and Affected Versions LB-LINK X-PRO version 1.0.22-20231206 Description A security flaw exists in the /etc/config/easycwmp file that allows for the use of hard-coded credentials. This issue can be exploited remotely, although the attack is considered highly complex...