CVE-2024-38063

此存储库没有 README。...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - 缺少授权导致的任意选项更新 描述 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX WordPress 插件存在由于 'postxpresetscallback' 函数缺少权限检查导致的数据未经授权修改漏洞，影响所有版本至...

CVE-2025-24813

Este repositorio no tiene un README...

CVE-2017-5123

CVE-2017-5123 Escalada de privilegios en Linux explotando la llamada al sistema waitid. El exploit es presentado por @XeR0x2A y @chaignc de HexpressoTeam únicamente con fines educativos. El error fue introducido el 21 de mayo de 2017 y corregido el 9 de octubre de 2017; se sabe que 4.14.0-rc4+ es...

EUVD-2026-72396

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::getreferencedata without first checking whether the requester is authorized to view the object the reference belongs to. The vulnerable code queried ObjectReference.uuid direct...

EUVD-2022-56045

PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...

Spring-Cloud-Gateway-Nacos

此存储库没有 README。...

apache-

This repository does not have a README...

CVE-2018-7602

此存储库没有 README。...

CVE-2017-13208-Scanner

CVE-2017-13208-Scanner https://nvd.nist.gov/vuln/detail/CVE-2017-13208 Introduction This is a simple script capable of detecting the CVE-2017-13208 vulnerability in Android libnetutils.so files. How it works Using r2pipe, the script checks whether dhcpsize's value is checked, if it isn't - the fi...

CVE-2026-0047-poc

CVE-2026-0047: Falta de comprobación de permisos en ActivityManagerService Un montón de mapas de bits robados de cada aplicación en ejecución — cero permisos, cero interacción del usuario. La falta de la comprobación enforceCallingOrSelfPermissionDUMP en ActivityManagerService.dumpBitmapsProto...

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — quién metió punteros en mi wasm Cadena de exploits de prueba de concepto para CVE-2026-15718 , una mala compilación por falta de sync en el compilador baseline de WebAssembly de Mozilla SpiderMonkey componente «JavaScript: WebAssembly». Un único array.fill de cero iteraciones...

vsock_poc

vsockpoc Investigando el error detrás de CVE-2021-26708 Este repositorio contiene un pequeño informe sobre CVE-2021-26708, y cómo este error puede convertirse en una primitiva de escritura Use After Free. El PoC aquí no es un exploit completo, sino solo mi andamiaje que usé al intentar investigar...

CVE-2026-80132

Dell Secure Connect Gateway (SCG) 5.0 contains a Missing Authentication for Critical Function vulnerability in Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . An unauthenticated attacker with remote network access could exploit this flaw to gain unauthorized ...

EUVD-2026-72375

ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

CVE-2025-48543

此存储库没有 README。...

route-detect

route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...

CVE-2021-38647-noimages

CVE-2021-38647 también conocido como "OMIGOD" Un paquete de Zeek que detecta intentos de explotación de CVE-2021-38647, también conocido como OMIGOD. https://corelight.com/blog/detecting-cve-2021-38647-omigod https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure...

CVE-2026-4945

The Otter Blocks plugin for WordPress (Gutenberg Blocks, Page Builder & FSE) is vulnerable to Insecure Direct Object Reference (IDOR) in the watch_checkout function across all versions up to and including 3.1.7 . The root cause is missing validation on a user-controlled key, allowing unauthentica...

CVE-2026-8279

CVE-2026-8279 affects the Masteriyo LMS WordPress plugin in all versions up to and including 2.2.0 . The root cause is a missing capability check in the delete_item_permissions_check function within the CourseProgressItemsController, allowing unauthenticated attackers to delete arbitrary course p...