CVE-2026-77578

CVE-2026-77578 — Lectura Arbitraria de Archivos Locales en Xibo CMS Descripción General CVE-2026-77578 es una vulnerabilidad de Lectura Arbitraria de Archivos Locales autenticada en Xibo CMS. Un usuario autenticado con privilegios de Administrador o acceso a Plantillas de Módulo puede importar un...

openfire-ssrf-cve-2019-18394

CVE-2019-18394: SSRF en Openfire FaviconServlet Server-Side Request Forgery no autenticado en Ignite Realtime Openfire 4.4.2 y anteriores consola de administración, TCP 9090/9091 por defecto. Corregido en 4.4.3 issue OF-1885. Falsificación de peticiones: el parámetro host se concatena en una URL ...

geiger

geiger A Geiger counter for AI agents. One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch. npx geiger-scan No install. No account. No telemetry. Reads configs and directories...

CVE-2024-2961-XXE-Exploit

CVE-2024-2961 CNEXT Script de adaptación del canal XXE Adapta el script de explotación de lectura de archivos PHP - RCE del cnext-exploits oficial de Ambionics al escenario de subida de SVG + XXE de lectura arbitraria de archivos tipo de reto "subidor de avatares" de PolarisCTF 2026. Requisitos...

CVE-2026-84118-who-labeled-the-crit-as-a-high

CVE-2026-84118 — Use-after-free en el GC de SpiderMonkey Bug 2057457 Este es uno de esos casos en los que Mozilla etiquetó una Critical como High. Así que alguien podría querer que Firefox actualice el pago a los cazadores de bugs originales si ese es el caso. EL TLDR: Puedes hacer una primitiva ...

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2016-5195

记录仅以学习为目的，禁止用于非法用途 原理 该漏洞的原理是依靠并发刷写脏页，使原本只读权限的文件内容发生变更 如果被修改的文件为root所属且具备SUID权限，那么就可以利用其进行提权 影响范围 在2016年10月前被编译的且版本在2.6.22 到 4.8.3之间的内核，因为2016年10月后的大概率被打补丁了 务必是Ext文件系统，如果是XFS文件系统，就会触发xfs只读页断言，而后系统重启，变成DDos攻击了 工具代码（dirtycowfilepayload.c） include include include include include include include...

vivo-root-build

PD2415 6.6.89 Candidato de Flujo Completo Esta fuente se basa en el motor IonStack PD2415 6.6.57 del mismo dispositivo/mismo SoC: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. El cierre del portador de dumpstate se conserva del método PD2241 validado. El objetivo archivado 6.6.89 mantiene...

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server WebSocket Arbitrary File Read Batch Detection Disclaimer: This tool is intended for authorized security testing and educational research only. Users must comply with local laws and regulations; unauthorized scanning or attacking others' systems is illegal. The...

WordPress SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SSL Zen versions = 4.7.42...

CVE-2026-26336-PoC

CVE-2026-26336 — Lectura de archivos no autenticada en Alfresco Share Resumen Alfresco Share expone un endpoint /share/page/resource/ utilizado para servir recursos estáticos. En versiones vulnerables, este endpoint no restringe adecuadamente el path traversal, lo que permite a un atacante no...

learnjavabug

This project is for security research only. It is forbidden to use this project to launch illegal attacks. The user is responsible for any consequences. This is a personal project for reproducing and publishing vulnerabilities that I find interesting or that have a significant impact. There isn't...

CVE-2026-7482-PoC

CVE-2026-7482: Lectura Fuera de Límites del Heap en Ollama PoC de 1 Día Este repositorio contiene una cadena de explotación de Prueba de Concepto PoC de 1 día para CVE-2026-7482 , una vulnerabilidad de lectura Fuera de Límites OOB no autenticada en el cargador de modelos GGUF de Ollama versiones...

CVE-2021-43798

CVE-2021-43798 por Privacy Hunter Versiones afectadas: Grafana 8.0.0-beta1 a 8.3.0 excepto versiones parcheadas Tipo de vulnerabilidad: Directory Traversal Recorrido de directorio Gravedad: Crítica Plataforma: Grafana plataforma de monitoreo y observabilidad de código abierto ⚠️ Detalles de la...

CVE-2026-93543

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-48072

Docmost , an open-source collaborative wiki and documentation software, is vulnerable to a path traversal flaw in versions prior to 0.80.1 . The public avatar and logo image endpoints fail to confine file path segments to the intended directory, allowing an unauthenticated attacker to traverse ou...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-81508

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2021-21017

CVE-2021-21017 Otro bug de Byte Order Mark en Adobe Reader : IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 && relur...