CVE-2026-88362

A flaw was found in MuJS. An attacker can trigger a Denial of Service DoS by providing specially crafted JavaScript input containing an excessively large array index. This flaw causes an out-of-range numeric value to be converted to an integer without proper validation, leading to undefined...

CVE-2026-13355

CVE-2026-13355 — Escalada de privilegios a administrador sin autenticación en Meta Box AIO Prueba de concepto en Python 3: escáner y exploit para CVE-2026-13355 en el paquete de WordPress Meta Box AIO y las extensiones relacionadas MB Frontend Submission / MB User Profile. | ---|--- Plataforma|...

BIT-ENVOY-2026-73512 Envoy: use-after-free in QUIC on internal redirects

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

BIT-ENVOY-2026-50572 Envoy: ext_authz - RawHttpClientImpl onSuccess 0x0 segfault

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HTTP external-authorization client can retain a stale request callback after a request is rejected. When RawHttpClientImpl::onSuccess later processes the...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Prueba de Concepto PoC Simplemente accede a la URL con tu código PHP en el parámetro "gridValoresPopHidden"...

venom-rs

Inyección de DLL reflectante mediante shellcode sRDI en Rust Nombre en clave: Venom La inyección de DLL reflectante mediante shellcode sRDI es una técnica de inyección de procesos que nos permite convertir una DLL determinada en código independiente de posición PIC, que luego puede inyectarse...

BYOVD-CVE-2023-52271-POC

Aviso legal: Este repositorio contiene código que se proporciona estrictamente solo con fines educativos y de investigación. NO utilice este código en sistemas que no le pertenezcan o para los que no tenga permiso explícito de pruebas. Cualquier uso indebido de este código puede violar leyes...

Bad_Hoist-WriteUp

Versión de Sleirsgoevy de BadHoist Análisis | CVE-2018-4386 !Nota Información general sobre la PS4: La consola PlayStation 4 cuenta con una CPU AMD x86-64 personalizada 8 núcleos, su sistema operativo Orbis OS está basado en FreeBSD v9.0 con partes también de NetBSD. También incluye una amplia...

DEBIAN-CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

UBUNTU-CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2025-5777

CVE-2025-5777 AKA CitrixBleed 2 Es una lectura fuera de límites OOB en el proceso de inicio de sesión de Citrix Gateway. Esto es una Prueba de Concepto que explota la OOB CVE-2025-5777 para obtener datos de memoria de una instancia vulnerable de Citrix Gateway, lo que posiblemente conduzca al rob...

CVE-2026-97029

A vulnerability in Flatpak allows a sandboxed application to bypass process ID namespace separation . Specifically, the kill(0, signal) or killpg(0, signal) calls can reach processes outside the sandbox if they share the same process group . A malicious or compromised Flatpak app can exploit this...

CVE-2026-97029 Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

EUVD-2026-88627

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

globalprotect-ca-cert-ipc

c2us.exe - Lanza un comando como el usuario que ejecuta la sesión de escritorio del usuario conectado. En este caso, lanza cmd.exe como SYSTEM en la sesión de escritorio del usuario sin privilegios. c2us.c - Código fuente para c2us.exe. epinject.exe - Inyector de punto de entrada, utilizado para...

qrv

QRV — a QNX Neutrino-based operating system, re-imagined for 64-bit RISC-V QRV is a ground-up adaptation and re-implementation of the QNX Neutrino 6.4 operating system for modern 64-bit hardware, with RISC-V rv64g as the primary architecture and x86-64 as a secondary target. The project started o...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...