CVE-2025-55234

CVE-2025-55234 This vulnerability allows attackers to perform relay attacks against the SMB Server Message Block protocol. If successful, it can lead to Elevation of Privilege EoP essentially allowing unauthorized users to gain higher-level access on a system By Mark Mallia Issue This vulnerabili...

dpapi-ng

dpaping - Biblioteca de des-/cifrado DPAPI-NG para Python Biblioteca para el des-/cifrado de DPAPI NG, también conocido como CNG DPAPI, en Python. Está diseñada para replicar el comportamiento de NCryptUnprotectSecret y NCryptProtectSecret. Puede utilizarse en hosts que no sean Windows para...

CVE-2025-32433-Exploit-edited

CVE-2025-32433 Exploit Windows Compatible Erlang/OTP SSH Unauthenticated Remote Code Execution Description This repository contains an exploit for CVE-2025-32433, a critical unauthenticated remote code execution vulnerability in Erlang/OTP SSH server. Key Features: ✅ Pre-authentication RCE exploi...

[SECURITY] [DSA 6540-1] radsecproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6540-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...

RLSA-2026:73979 Critical: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass...

CVE-2025-55182-POC

CVE-2025-55182 POC & Detection Collection of exploit and detection tools for React Server Components RSC Unsafe Deserialization vulnerability Vulnerability Information CVE-ID : CVE-2025-55182 Affected Versions : React 19.x, Next.js 15.x/16.x when using App Router Attack Vector : RCE via prototype...

cve-2023-23397-detection-lab

CVE-2023-23397 Detection & Mitigation Research Lab Overview This project is a defensive cybersecurity research lab focused on the network behavior associated with CVE-2023-23397. The project studies suspicious outbound SMB and NTLM authentication from a Windows endpoint and demonstrates a complet...

CVE-2026-94485

A flaw was found in Next.js. During local development, the development server exposes a Model Context Protocol MCP endpoint without properly restricting cross-site requests. If a developer visits a malicious website while running the development server, an attacker can issue unauthorized requests...

CVE-2026-94486

A flaw was found in Next.js. The local development server exposes a Model Context Protocol MCP endpoint without properly restricting cross-site requests. If a developer running the development server visits a malicious website, an attacker can issue unauthorized requests to this endpoint, leading...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...

libreoffice-remote-arbitrary-file-disclosure

Descripción de la vulnerabilidad CVE-2018-6871 Primera parte LibreOffice es compatible con la función COM.MICROSOFT.WEBSERVICE: https://support.office.com/en-us/article/webservice-function-0546a35a-ecc6-4739-aed7-c0b7ce1562c4 La función es necesaria para obtener datos por URL, normalmente se usa...

obike

oBike Protocol Description BLE/HTTP This document provides an analysis of the oBike communication protocols as of January 2018. Results have been presented at the insomni'hack security conference 2019: slides recording as well as at the AREA41 security conference 2018: slides recording General...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC for the deserialization vulnerability in the Flight protocol of React Server Components. What is it? Next.js 14+ and React 19 use a proprietary protocol "Flight" to communicate between client and server. The problem: the server loads any module without...

CVE-2026-94485

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94485

The Next.js framework (versions 16.0.0 through 16.3.8 ) contains a vulnerability in the next dev development server. The server exposes a Model Context Protocol (MCP) endpoint that lacks reliable restrictions on cross-site requests . If a developer visits a malicious website while the development...

EUVD-2026-91673

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

EUVD-2026-91667

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486

The Next.js React framework contains a vulnerability in the next dev development server, specifically affecting versions 16.0.0 through 16.3.8 . The server exposes a Model Context Protocol (MCP) endpoint that fails to reliably restrict cross-site requests. This flaw allows an attacker to issue un...