8508 matches found
CVE-2020-1034
CVE-2020-1034 Aviso Este repositorio contiene un exploit funcional. La publicación se realizó únicamente con fines educativos. El propietario de este repositorio no es responsable de ningún daño causado por cualquier parte del código fuente publicado aquí. Este repositorio fue creado como una tar...
s3_objects_check
S3 Objects Check Descripción Evaluación de caja blanca de los permisos efectivos de objetos S3, con el fin de identificar objetos de acceso público. Permite identificar objetos de acceso público, así como objetos accesibles para AuthenticatedUsers mediante el uso de un perfil secundario. Existen...
WindowsJobLock
Bloqueo de Procesos de Windows mediante Job Objects Una herramienta de bloqueo de procesos de Microsoft Windows mediante Job Objects Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...
CVE-2026-26903-PoC
CVE-2026-26903 PoC Denegación de servicio mediante recursión ilimitada en la funciónreplaceEqualDeep de TanStack Query Una única actualización de consulta manipulada con objetos profundamente anidados puede congelar el hilo de JavaScript indefinidamente , provocando que la aplicación quede...
RemoteMonologue
RemoteMonologue RemoteMonologue es una técnica de recolección de credenciales de Windows que permite comprometer usuarios de forma remota aprovechando la clave RunAs de usuario interactivo y forzando autenticaciones NTLM mediante DCOM. Lea el artículo RemoteMonologue: Armando DCOM para Coerciones...
django-cve-2025-64459
Django CVE-2025-64459 Esta aplicación demuestra CVE-2025-64459 que afecta a múltiples versiones de Django. Esta vulnerabilidad ha sido corregida en versiones más recientes de Django. SQL Injection SQL Injection es cuando la entrada proporcionada por el usuario se trata como parte de una consulta...
CVE-2026-97452
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...
CVE-2026-96808
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...
CVE-2026-96560
LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...
CVE-2026-91799
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution...
CVE-2026-91790
When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF...
CVE-2026-91790
Foxit PDF Editor/Reader is vulnerable to a Use-After-Free (UAF) vulnerability during the rendering of page images. The issue stems from a failure to properly validate image objects containing malformed optional content attributes , which leads the application to access an already-freed internal d...
EUVD-2026-85132
When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF...
EUVD-2026-85124
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution...
CVE-2026-91799
A use-after-free vulnerability exists in Foxit PDF Editor/Reader due to improper handling of JavaScript array objects . Specifically, the vulnerability occurs during array processing where a specially crafted PDF may cause the application to access a released object. This flaw could potentially l...
uaf-2023-28205
CVE-2023-28205: Vulnerabilidad de Use-After-Free en Apple WebKit Esta vulnerabilidad puede explotarse mediante contenido web manipulado maliciosamente, lo que permite a los atacantes ejecutar código arbitrario. Descripción El código desencadena una vulnerabilidad de use-after-free UAF al retrasar...
CVE-2026-96273
Ghidra versions prior to 12.1.4 are vulnerable to a Denial of Service condition due to a lack of validation of the TYPE_COL byte within the OptionsDB.createUnregisteredOption() function. This flaw triggers an ArrayIndexOutOfBoundsException, resulting in domain objects becoming permanently locked....
Detection-and-Mitigation-script-for-CVE-2021-42717
Script de detección y mitigación para CVE-2021-42717 Script de detección y mitigación para CVE-2021-42717 - Vulnerabilidad DoS de ModSecurity en el análisis de JSON ModSecurity 3.x hasta 3.0.5 maneja incorrectamente objetos JSON excesivamente anidados. Objetos JSON diseñados con anidamiento de...