wordpress-really-simple-security-authn-bypass-exploit

wordpress-really-simple-security-authn-bypass-exploit Este es un programa en Python3 que explota la vulnerabilidad de omisión de autenticación en Really Simple Security 9.1.2 CVE-2024-10924. DESCARGO DE RESPONSABILIDAD Esta herramienta está destinada a ingenieros de seguridad y personal de appsec...

CVE-2014-6271

CVE-2014-6271...

awesome-ios-security

Awesome Seguridad iOS Una lista curada de increíbles recursos de seguridad de aplicaciones iOS. Una colección de increíbles herramientas, libros, cursos, publicaciones de blog y material interesante sobre seguridad de aplicaciones iOS y pruebas de penetración. Contenido Herramientas Herramientas ...

CVE-2020-29607

CVE-2020-29607 CVE-2020-29607 漏洞利用程序 使用方法...

CVE-2023-34362-Defense-Package

Este repositorio no tiene un README...

django-vulnerability-CVE-2025-32873

Problema de seguridad en Django sobre striptags requisitos Django 5.2 Django Rate Limit pip install django-ratelimit...

NotQuite0day

NotQuite0day This repository documents real bugs in real software which we reported to vendors but vendors either ignored our emails and the bugs are not fixed after a long long time. The repo is organized by the release date. In each folder you can read about the bugs, versions affected. If...

Chamilo Command Injection

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name. id: CVE-2023-34960 info: name: Chamilo Command Injection author: DhiyaneshDK severity: critical...

CrushFTP VFS - Sandbox Escape LFR

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox. id: CVE-2024-4040 info: name: CrushFTP VFS - Sandbox Escape LFR author: DhiyaneshDK,pussycat0x severity:...

Skype for Business 2019 (SfB) - Blind Server-side Request Forgery

Skype Pre-Auth Server-side Request Forgery SSRF vulnerability id: CVE-2023-41763 info: name: Skype for Business 2019 SfB - Blind Server-side Request Forgery author: hateshape severity: medium description: | Skype Pre-Auth Server-side Request Forgery SSRF vulnerability impact: | Unauthenticated...

Micro Focus Operations Bridge Reporter - Remote Code Execution

Micro Focus Operations Bridge Reporter 10.40 is susceptible to remote code execution. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or execute unauthorized operations without entering necessary credentials. id: CVE-2021-22502 info: name: Micro Focus...

Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...

CVE-2026-90510

creationtimestamp| type| source ---|---|--- 2026-09-13 14:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfr27cacw22 2026-09-13 16:50:43+00:00| seen| https://gist.github.com/ichintu/ccd66f14a97ed0726d9247eeed3e2e87...

CVE-2026-89681

creationtimestamp| type| source ---|---|--- 2026-09-13 11:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfjpldh652w...

CVE-2026-90772

creationtimestamp| type| source ---|---|--- 2026-09-13 11:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ey6j7kk7xxcr5 2026-09-13 12:03:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfkgugkaq2s 2026-09-13 12:03:08+00:00| seen|...

CLSA-2026-1789289706 TuxCare security update for fast-xml-parser (1 CVE)

TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.1-tuxcare.1...

CLSA-2026-1789286187 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.3.13-tuxcare.5...

CVE-2026-89080

The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...

EUVD-2026-76959

The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...

CVE-2026-89080

The Really Simple Security WordPress plugin before 9.8.1 is vulnerable to an unauthenticated 2FA bypass via email provider state demotion . A request that resets a completed email two-factor enrolment allows an attacker who already possesses the account's password to bypass the second factor and ...