What Response Marginals Miss: Adaptive Query Complexity of Functional Backdoor Recovery

Functional backdoor recovery finds any trigger whose attack success rate is at least a given threshold rather than to recover the planted trigger. We study the minimum number of queries required for this task under label feedback which returns the predicted class label. We construct two finite...

Rocky Linux 10.1 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_1334)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261334 advisory. glibc: Integer overflow in memalign leads to heap corruption CVE-2026-0861 glibc: glibc: Information disclosure via zero-valued network query...

Elasticsearch 9.0.x < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-185)

The version of Elasticsearch installed on the remote host is 9.0.x prior to 9.4.8, or 9.5.x prior to 9.5.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-185 advisory. - Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via...

-CVE-2021-26904

CVE-2021-26904 LMA ISIDA Retriever 5.2 permite la inyección SQL Descripción sugerida : "ISIDA RETRIEVER v5.2" Inyección SQL Funcionalidad vulnerable : La plataforma ISIDA RETRIEVER es vulnerable a la inyección SQL URL y parámetro vulnerables : website.com/index.php?title=Injection URL y parámetro...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

GHSA-8FXW-FMJ8-XP7J MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

EUVD-2026-75637

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs...

GHSA-6F2X-V7Q7-M7M5 hickory-resolver follows irrelevant CNAME records

When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records...

hickory-resolver follows irrelevant CNAME records

When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records...

codeql-workshop

Encontrando vulnerabilidades con CodeQL Taller original de Sylwia Budzynska Requisitos previos • Recursos • Taller ¿Para quién es? : Ingenieros de seguridad, investigadores de seguridad y desarrolladores. Lo que aprenderás : Aprende a usar CodeQL para explorar código y para encontrar problemas de...

CVE-2025-30208-PoC

CVE-2025-30208 - Vite Arbitrary File Read PoC This is a Proof-of-Concept PoC script to exploit CVE-2025-30208, allowing arbitrary file reads on Vite development servers. Vulnerability Details Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2,...

CVE-2026-54350-Budibase-NoSQL-Injection

CVE-2026-54350 — Inyección de operadores NoSQL no autenticada en Budibase Inyección de operadores JSON/NoSQL no autenticada en Budibase. Cualquier visitante anónimo de una aplicación Budibase publicada que exponga una consulta PÚBLICA respaldada por una fuente de datos de documentos MongoDB,...

CVE-2026-46591

camel-neo4j Reproducción de Inyección Cypher CVE-2026-46591 Este proyecto demuestra una inyección Cypher en el componente camel-neo4j de Apache Camel, registrada como CVE-2026-46591. El productor construye la cláusula WHERE de Cypher para sus operaciones de coincidencia/recuperación y eliminación...

CVE-2026-9082-Drupal-PoC

CVE-2026-9082 - PoC de Inyección SQL PostgreSQL en Drupal Core Resumen Este repositorio proporciona una Prueba de Concepto PoC ética para CVE-2026-9082 , una vulnerabilidad de inyección SQL Altamente Crítica en Drupal Core que afecta a todos los sitios basados en PostgreSQL que ejecutan Drupal 8....

PoC_CVE-2017-3164_CVE-2017-1262

Apache Solr Poc CVE-2017-3164 CVE-2017-12629 This folder contains example exploits for Apache Solr CVE-2017-3164 CVE-2017-12629 To be use ONLY for education purposes and with full permission of the Apache Solr Server owner. You will need to know the IP or DNS name of the Apache Solr server and th...

CVE-2025-30208

CVE-2025-30208 Usando una cadena de consulta de importación raw especial en un servidor de desarrollo de Vite, un atacante puede leer archivos arbitrarios Resumen del CVE Los servidores de desarrollo de Vite anteriores a 6.2.3, 6.1.2, 6.0.12, 5.4.15 y 4.5.10 pueden eludir las comprobaciones de...

CVE-2026-46585

Reproducción de Inyección de Cabecera QUERY de camel-lucene CVE-2026-46585 Este proyecto demuestra una inyección de cabecera de mensaje / evasión de autorización en el componente camel-lucene de Apache Camel, registrado como CVE-2026-46585. El productor de consultas Lucene lee la frase de búsqued...

CVE-2024-24919

CVE-2024-24919 No soy responsable de nada : Instalación git clone https://github.com/LucasKatashi/CVE-2024-24919 && cd CVE-2024-24919 python3 -m pip install -r requirements.txt && chmod +x CVE-2024-24919.py ./CVE-2024-24919 Consulta FOFA title="Check Point SSL Network Extender"...

Malicious code in yonzoffic-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...