advisories

advisories "Testing can prove the presence of bugs, but not their absence." -- Edsger W. Dijkstra Una colección de mis avisos de seguridad públicos. Ver también https://github.com/hnsecurity/vulns https://hnsecurity.it/blog/author/marco-ivaldi/ Avisos Linux CVE-2006-1242. Debilidad de divulgación...

CVE-2001-0932

CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 1 Publicación en Exploit-db en https://www.exploit-db.com/exploits/21162/ CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 2 Publicaci...

security_articles

securityarticles- 连接式V16信标中的漏洞 文章解释了我发现的Help Flash IoT v16信标 中的多个漏洞。这些漏洞影响信标的通信及其通过WiFi的软件更新机制。 2025年12月...

DVWA

翻译 翻译：@inVains @songzy12 @cnskis 关于 DAMN VULNERABLE WEB APPLICATION（DVWA） Damn Vulnerable Web Application DVWA译注：可以直译为："该死的"不安全Web应用程序，是一个编码差的、易受攻击的 PHP/MySQL Web应用程序。 它的主要目的是帮助信息安全专业人员在合法的环境中，练习技能和测试工具，帮助 Web 开发人员更好地了解如何加强 Web 应用程序的安全性，并帮助学生和教师在可控的教学环境中了解和学习 Web 安全技术。 DVWA的目的是通过简单明了的界面来练习一些最常见的...

CVE-2018-7211-PoC

CVE-2018-7211-PoC El PoC||GTFO de CVE-2018-7211 Referencia: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ Requisitos Ninguno, solo Python Uso Ejecute el script root@kitploit: $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod ...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Investigación de Vulnerabilidades RAPTOR Loop-Hunt Una auditoría de seguridad de Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a realizada con la metodología RAPTOR loop-hunt : reconocimiento determinista → 25 agentes generadores aislados leyendo el código...

CVE-2018-16509

CVE-2018-16509 Ghostscript 包含多个 -dSAFER 沙箱绕过漏洞 运行 root@kitploit: $ docker run -d --name cve-2018-16509 -p 9000:9000 cve-2018-16509...

CVE-J2store-2026

J2Store / J2Commerce — CVE-2026-67358–67362 PoC Material de prueba de concepto para cuatro vulnerabilidades en comj2store J2Commerce J2Store, descubiertas por Murrez y corregidas en:...

nf-tables-lpe

nf-tables-lpe Exploits de Team Orca de Sea Security y Qrious Secure para múltiples vulnerabilidades en el módulo nftable de Netfilter...

CVE-2026-6205

creationtimestamp| type| source ---|---|--- 2026-09-21 12:45:04+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-synology-diskstation-manager-dsm- 2026-09-21 13:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvzshwm2f22i...

Security Bulletin: Multiple Vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance - 多个输入验证漏洞 Exploit-db 发布页：https://www.exploit-db.com/exploits/30290/ Exploit-db 论文：https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf Git...

GHSA-8MX4-8XFC-QR43 vulnerabilities

Vulnerabilities for packages: ffmpeg, eco-python-ffmpeg-minimal...

cisco-security-research

Investigación de Seguridad de Cisco Investigador: 0xReadingSteiner Contacto: [email protected] Proveedor: Cisco Systems, Inc. Proveedor notificado: 2026-08-04 Cisco PSIRT, ZDI, SSD Respuesta del proveedor: Ninguna Por qué existe esto La investigación de seguridad independiente sobre producto...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: tez, pinot, druid, apache-pulsar, pinot-fips, apache-pulsar-fips...

GHSA-8WMF-6V46-5GFG vulnerabilities

Vulnerabilities for packages: traefik, cluster-api-azure-controller, hydra, tekton-pipelines, flux-source-controller, tempo, containerd, openbao, jitsucom-bulker, otel-cli, kube-state-metrics, headlamp, trufflehog, knative-eventing, cert-manager-istio-csr, azuredisk-csi, prometheus-operator,...

Fedora 45 : thunderbird (2026-aa0e0deed1)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aa0e0deed1 advisory. Update to latest stable upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

nbox-pwnage

nbox-pwnage root@kitploit: Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. Crea tu propio appliance de nbox: vagrant up 2. Accede por SSH al appliance con vagrant ssh 3. Comprueba algunas de...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM are affected by multiple vulnerabilities CVE-2026-16190, CVE-2026-15887, CVE-2026-15412, CVE-2026-16435, CVE-2026-15396, CVE-2026-15634, CVE-2026-16185, CVE-2026-10841, CVE-2026-11548, CVE-2026-11549,...

CVE-2026-19941

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...