CVE-2026-82900

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

EUVD-2026-42899

PraisonAI: Shell command allowlist bypass via find -exec built-in action...

EUVD-2026-44636

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend...

CVE-2026-82900

IBM Guardium Data Protection versions 12.2.2 and 12.1 are affected by a vulnerability that could allow a remote attacker to delete arbitrary files. This issue is caused by an improper limitation of a pathname to a restricted directory (CWE-22). The impact is characterized by high consequences for...

CVE-2026-82900 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

Baskerville

Baskerville Reads from files or interface and writes to files in specified directory with filename based on unixtime of first packet in each file. Certain protocols can be suppressed, in which case only the first N packets are recorded to disk. This reduces disk usage saving data which is of litt...

zipdefrag

Este volcado es un rompecabezas o parseo avanzado a escopetazos para necios y rebeldes érase una vez Érase una vez, querido lector, en una noche oscura y tormentosa, su fiel autor se topó con una situación desconcertante y misteriosa: un sistema donde lo único que impedía el análisis de memoria p...

MS15-011-Files

MS15-011-Files Repo that the MS15-011 exploit clones to get required files. Avoids having to download all files from exploitdev...

astrolock

Astrolock A purposely vulnerable application in order to demonstrate PHP payload smuggling techniques for PNG files...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...

CVE-2026-83991-writeup-and-poc

The File Said No. Cloud Files Said Supersede. CVE-2026-83991 is a Windows Cloud Files tampering vulnerability whose published affected range begins with Windows 10 version 1809, almost eight years before the September 2026 fix. I asked Windows to open a file for writing. It answered...

CVE-2026-41940---cPanel-WHM-check

IOC Check Sessions Files Overview iocchecksessionsfiles.sh is a cPanel-provided detection script referenced in the official cPanel security advisory: Security: CVE-2026-41940 - cPanel & WHM / WP2 Security Update 04/28/2026 The script is used to scan cPanel/WHM session files for suspicious...

EUVD-2026-95242

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component due to improper privilege management (CWE-269). A low-privileged local user can exploit this flaw to gain root privileges , allowing for the unauthorized access or modification of sensitive...

c2finder

c2finder Exención de responsabilidad obligatoria: No soy un maestro programador en absoluto, así que este es un script muy simple. No confíes en que sea perfecto. Sin embargo, estoy abierto a comentarios o ideas para mejoras : Descripción Este script descarga la lista maestra de C&C de Bambanek...

CVE-2026-29597

CVE-2026-29597: Improper access control DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive configuration files by force browsing the “/Admin/filemanager/filedetails.asp” endpoint and manipulating the “fil...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Microsoft Office Zero-Day Status: Actively exploited → Emergency patch released Severity: 🔴 High Risk Type: Security Feature Bypass 🔍 What is it? CVE-2026-21509 is a serious vulnerability in Microsoft Office that allows attackers to bypass built-in security protections by...

EUVD-2026-42897

PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace...

EUVD-2026-95128

Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...

EUVD-2026-95122

Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...