Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Explotando-CVE-2021-44228-Log4Shell-en-un-Entorno-Bancario Objetivo: Demostrar la explotación de la vulnerabilidad Log4Shell CVE-2021-44228 dentro de un entorno simulado de aplicación bancaria. Alcance: 1: Configurar una aplicación bancaria vulnerable usando Apache Log4j. 2:Crear un payload para...

CVE-2022-22965

Vulnerabilidad Spring4Shell - CVE-2022-22965 📕 Introducción La vulnerabilidad spring4shell fue nombrada así debido a 2 vulnerabilidades encontradas y ampliamente explotadas por atacantes a principios de 2022. Una de estas vulnerabilidades se encuentra en el componente del framework llamado "Sprin...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint -un -p -ru 면책 조항 이 스크립트는 교육 및 연구 목적으로만 제공됩니다. 소유하지 않았거나 테스트를 위한 명시적 허가를 받지 않은 시스템에 대한 무단 사용은 불법이며 비윤리적입니다...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Descargo de responsabilidad Este repositorio contiene código de prueba de concepto para CVE-2023-466064 y está destinado estrictamente a fines educativos. Los autores y colaboradores no respaldan ninguna actividad ilegal. La información aquí presentada es para fines...

CVE-2022-26134-Exploit-Detection

Detección de Exploit de Confluence RCE CVE-2022-26134 Requisitos previos 1. ClamAV Clona este repositorio o descarga la regla Yara en tu servidor Confluence Estamos usando la regla Yara proporcionada por volexity/threat-intel, quienes revelaron esta vulnerabilidad por primera vez. Git Clone git...

Malicious code in css-jptvix-polyfill (npm)

Source: amazon-inspector cea61788c370593a2720461d06b74942933d38d30b449851a05541b5b7f189aa The package ships thunderboltRegistry.js, a Proxy-based shim that exports names mimicking internal Wix thunderbolt modules thunderboltRegistry, siteAssetsRegistry, editorRegistry, corvidRegistry,...

disable-RegisterSpoolerRemoteRpcEndPoint

disable-RegisterSpoolerRemoteRpcEndPoint Solución alternativa para la vulnerabilidad de ejecución remota de código de Windows Print Spooler CVE-2021-34527. Ver: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Actualización 2021-07-08: Microsoft publicó un parche Microsoft ya...

DEBIAN-CVE-2026-43598

Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...

CVE-2026-43598

Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...

AZL-106679 CVE-2026-106547 affecting package hdf5 1.14.6-4

A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...

DEBIAN-CVE-2026-106547

A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...

CVE-2026-79810

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...

CVE-2026-76750

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

CVE-2026-76751

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent...

CVE-2026-102163

On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...

CVE-2026-102165

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...

CVE-2026-102167

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network...

CVE-2026-106547

A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...

EUVD-2026-93991

A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...

CVE-2026-106547 HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata

A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...