in-toto

in-toto in-toto provides a framework to protect the integrity of the software supply chain. It does so by verifying that each task in the chain is carried out as planned, by authorized personnel only, and that the product is not tampered with in transit. in-toto requires a project owner to create...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 हमला विवरण यह पाया गया कि Apache Log4j 2.15.0 में CVE-2021-44228 को संबोधित करने के लिए किया गया सुधार कुछ गैर-डिफ़ॉल्ट कॉन्फ़िगरेशन में अधूरा था। यह हमलावरों को Thread Context Map MDC इनपुट डेटा पर नियंत्रण रखने की अनुमति दे सकता है जब लॉगिंग कॉन्फ़िगरेशन एक...

PcapViz

PcapViz PcapViz dibuja redes como topologías de dispositivos y flujos de información utilizando la información de paquetes en archivos pcap capturados de un dispositivo de red mediante tcpcap u otro software de captura. Filtra y opcionalmente muestra los paquetes capturados en cualquiera de los 3...

CVE-2025-55780

CVE-2025-55780 Desreferencia de puntero nulo en la función de renderizado EPUB de MuPDF 1.26.4 Referencia CVE - CVE-2025-55780 Versiones afectadas : 1.26.7 y anteriores están afectadas Encontrado y probado en : 1.26.4 Puntuación de severidad CVSSv3 : 7.5 Alta Corregido en el commit :...

CVE-2023-44771_ZenarioCMS--Stored-XSS---Page-Layout

ZenarioCMS स्टोर्ड XSS v.9.4.59197 लेखक: Sergio विवरण: ZenarioCMS v.9.4.59197 में क्रॉस साइट स्क्रिप्टिंग भेद्यता एक स्थानीय हमलावर को पेज लेआउट में क्राफ्टेड स्क्रिप्ट के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। हमले के वेक्टर: पेज लेआउट में प्रविष्टि के स्वच्छीकरण में एक भेद्यता क...

Log4j_CVE-2021-45046

Log4j 2.15.0 Escalada de Privilegios -- CVE-2021-45046 Ataque Descripción Se descubrió que la corrección para abordar CVE-2021-44228 en Apache Log4j 2.15.0 era incompleta en ciertas configuraciones no predeterminadas. Esto podría permitir a atacantes con control sobre los datos de entrada del...

WordPress Page Layout builder v1.9.3 - Cross-Site Scripting

WordPress plugin Page-layout-builder v1.9.3 contains a cross-site scripting vulnerability. id: CVE-2016-1000141 info: name: WordPress Page Layout builder v1.9.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress plugin Page-layout-builder v1.9.3 contains a cross-site...

Ruby_Pricise_Heap_Spray

RubyPriciseHeapSpray Usa strings de ruby para hacer un heap spray preciso en un entorno win7 ps. 0c0c0c0c tendrás que ajustar el último número de iteraciones según cuántas veces llames a la función spray. eso es por cómo funciona ruby.... básicamente ruby decide eliminar todos los heap allocs de...

CVE-2014-4378

CoreGraphics Information Disclosure - CVE-2014-4378 Este artículo explora la explotabilidad de MobileSafari en IOS 7.1.x. El uso de un archivo PDF manipulado como imagen HTML permite filtrar información sobre la disposición de la memoria al intérprete de Javascript del navegador. La librería Appl...

Foxit-Precise-Heap-Spray

Este repositorio no tiene un README...

CVE-2026-85021

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Exploit de Zip Slip RCE en Xibo CMS CVE-2023-33177 Este exploit demuestra una vulnerabilidad de path traversal en Xibo CMS CVE-2023-33177 que permite la ejecución remota de código mediante importaciones maliciosas de diseños. Detalles de la vulnerabilidad CVE/Aviso: CVE-2023-33177 Versiones...

EUVD-2026-70328

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-68860

Dell PowerProtect Data Manager (versions 20.2.0.0 and below ) is affected by a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker with high attack complexity and required user interaction could exploit this to launch phishing attacks , resulting in high confidentiali...

kernel: nfsd: release layout stid on setlease failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When a setlease operation fails, the system prematurely releases a layout state identifier. An attacker could exploit this by triggering the failure, leading to a use-after-free vulnerability. This could result in a system...

kernel: NFSv4/flexfiles: reject zero filehandle version count

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

kernel: nfsd: release layout stid on setlease failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When a setlease operation fails, the system prematurely releases a layout state identifier. An attacker could exploit this by triggering the failure, leading to a use-after-free vulnerability. This could result in a system...

CVE-2026-85021 langgenius dify Splash Layout splash.tsx router.replace cross site scripting

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...