CVE-2025-68624

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...

EUVD-2025-210903

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...

CVE-2025-68624

N-able Mail Assure (formerly SolarWinds MSP Mail Assure), a cloud-based multi-tenant SMTP relay, contains a design-level authorization flaw (CWE-290) where an authenticated SMTP user can send outbound mail using MAIL FROM addresses of other tenants . After valid SMTP AUTH, the server accepts arbi...

follina.py

'Follina': RCE n-day en MS-MSDT de Microsoft Office PoC rápido para replicar la vulnerabilidad RCE 'Follina' de Office con fines de pruebas locales. Al ejecutar el script se generará un archivo de payload clickme.docx o clickme.rtf en tu directorio de trabajo actual y se iniciará un servidor web...

CVE-2025-57428

⚠️ Este repositorio se mantiene solo como referencia para CVE-2025-57428. Para otros avisos y actualizaciones, consulte: security-advisories. CVE-2025-57428 - Interfaz de depuración Telnet habilitada por defecto permite acceso de bajo nivel a flash/registros Producto afectado Proveedor/Marca: Each...

-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4

WordPress N-Media Website Contact Form with File Uploader Análisis de la vulnerabilidad de carga de archivos 1. Análisis del código de la vulnerabilidad Archivo del plugin: classes/plugin.class.php, método: uploadfile root@kitploit: function uploadfile // ... if ! empty $FILES $tempFile = $FILES...

CVE-2026-86218-N-central-IOC-Toolkit

CVE-2026-86218 — RCE Pre-Autenticación en N-able N-central | Kit de Herramientas de IOC y Detección CVSS 10.0 Crítico · Ejecución Remota de Código Pre-Autenticación · Inyección de Código Estático CWE-96 · Explotado Activamente · CISA KEV -yellow Mantenedor: @jithinkrishnanrs · Repo:...

CVE-2026-89695

A flaw was found in the Linux kernel's Network File System Daemon nfsd. The nfsd4decodeposixacl function, responsible for decoding POSIX Access Control Lists ACLs, does not properly cap the entry count received from a client. A remote attacker can exploit this by sending a specially crafted ACL...

UBUNTU-CVE-2026-89695

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

CVE-2026-89695

A Denial of Service vulnerability in the Linux kernel's NFSD (Network File System Daemon) component. The nfsd4_decode_posixacl() function reads a client-supplied u32 entry count without capping it, passing it directly to an O(n²) bubble sort (sort_pacl_range()). A remote attacker can send a craft...

CVE-2026-89695

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

CVE-2026-26114-Patch

CVE-2026-26114-Patch parcheando el N-day de CVE-2026-26114 antes que microsoft. donde microsoft no pudo parchear el 100% en muchos meses. pero FAC security lo hizo...

Vulnerability was concealed in N-central of N-able

N-able discovered a vulnerability in N-central versions prior to 2026.3.1.14. The vulnerability involves a pre-authentication remote code execution flaw. An attacker can execute arbitrary code on the affected system remotely, without any form of authentication. All installations running on...

numpy-1.13.1

Travis CI Status --- NumPy es el paquete fundamental necesario para la computación científica con Python. Este paquete contiene: un potente objeto de arreglo N-dimensional funciones sofisticadas broadcasting herramientas para integrar código C/C++ y Fortran...

pocs_slides

Comparto mis advisories, PoCs, diapositivas y scripts sobre seguridad en IoT / protocolos. Puedes encontrarme en: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Diapositivas OffByOne2025: Patch Diffing, ¡eres mi...

BIT-TOMCAT-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.0 through 9.0.120. Th...

ncentral-compromise-ioc-triage

N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...

exploits

Exploits Mi colección personal de exploits de n-days, CTFs, 0days, kernels, navegadores y muchas cosas interesantes :D...

chrome_v8_ndays

...

Serein

Serein | En el atardecer de lluvia | Este proyecto está en pausa Linux English version is online! | ¡Ya está disponible la versión en inglés de Linux! http://github.com/W01fh4cker/SereinLinux Declaration | Declaración Este proyecto está destinado solo para uso autorizado. Prohibido su uso para...