CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Laboratorio de Vulnerabilidad e Informe de PoC Entorno práctico Laboratorio Vulnerable e informe detallado de análisis y explotación de la cadena de vulnerabilidades Ni8mare en la plataforma n8n — desde Lectura Arbitraria de Archivos...

oob_entry

oobentry: Investigación autorizada de exploits del kernel de iOS para acceso tfp0 Visita las versiones: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip Un espacio tranquilo y cuidadoso para que los investigadores documenten, discutan y compartan conocimientos sob...

CVE-2026-52886

Path Traversal: Bypass de verificación de prefijo startswith Notepad++ — Lectura arbitraria de archivos mediante traversal debackupFilePath en session.xml Aviso GHSA: GHSA-rqfm-pw34-r7j6 CVE: CVE-2026-52886 Gravedad: Moderada Afectado: v8.9.6.4 Corregido: v8.9.7 Commit del parche: 7e66f36 Archivo...

duckdb

Prueba Jepsen DuckDB Pruebas Jepsen para la base de datos DucKDB. Se ejecuta localmente, en lugar de en un clúster remoto. La prueba genera una colección de procesos locales que abren un archivo DuckDB localmente e interactúa con ellos a través de STDIN/STDOUT. Este es un prototipo temprano. Se...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds OOB read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memo...

kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn3 component. This vulnerability, an Out-of-Bounds OOB read, occurs when parsing decoder messages without proper boundary checks. A local attacker could potentially exploit this to read sensitive information from memory or cause system...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically within the drm/amdgpu/vcn4 component. This vulnerability allows for an out-of-bounds read when processing an Instruction Buffer IB. An attacker could potentially exploit this to read sensitive information...

CVE-2026-17602

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, t...

CVE-2026-3576

CVE-2026-3576 - Plugin de WordPress Planyo Online Reservation System -f --disable-check python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd...

directus-security

directus-security Audita cualquier instancia de Directus para detectar las configuraciones incorrectas que realmente filtran datos: exposición de lectura del rol público, enumeración de usuarios, fugas de versión/esquema sin autenticación, introspección de GraphQL y el oráculo de enumeración de...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ ADVERTENCIA Este código es SOLO para fines educativos y pruebas autorizadas. 📋 Descripción CVE-2026-11645 es una vulnerabilidad de lectura y escritura fuera de límites OOB en el motor V8 de Google Chrome. Un atacante remoto puede...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Divulgación de seguridad: lectura fuera de límites en el analizador MIME de facil.io provoca la caída del servidor ID de CVE asignado CVE-2026-66729 Producto: facil.io Versiones afectadas: facil.io = 0.6.0 todas las 0.6.x, todas las 0.7.x, master; introducido cuando se añadió el analizador MIME e...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service An independently implemented, safety-conscious research harness and technical analysis for CVE-2019-6447 , an unauthenticated HTTP service exposed by vulnerable versions of ES File Explorer for Android. Authorized research only. Use thi...

Grafana-Plugin-Enumerator-CVE-2021-43798

Grafana CVE-2021-43798 Plugin Enumerator A small Bash-based tool for testing Grafana instances for CVE-2021-43798 , a directory traversal vulnerability affecting vulnerable Grafana versions. The tool enumerates Grafana plugin IDs and uses curl --path-as-is to test whether directory traversal can...

CVE-2026-17602

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to a Directory Traversal (Path Traversal) vulnerability in all versions up to and including 4.7.42 . The root cause is a flaw in handling the 'file_name' parameter. This allows authenticated attackers wit...

CVE-2026-17602 SSL Zen <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_name' Parameter

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, t...

EUVD-2026-86599

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, t...

CVE-2026-93541

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated...

pwn_jenkins

Ejecución remota de código Lectura arbitraria del CLI de Jenkins CVE-2024-23897 afecta a versiones anteriores a 2.442 y a la LTS 2.426.3 Aviso de Jenkins, Créditos Autenticado, puede recuperar un archivo completo: java -jar jenkins-cli.jar -noCertificateCheck -s https://xxx.yyy/jenkins -auth...