CVE-2018-11761

Summary In a recent research on Apache Tika, I found a DOS Denial of Service vulnerability existed on its XML parser. It is caused that the parser improperly parses XML document. Affected Version Tested on ElasticSearch 6.3.1 using Tika 1.18 and 6.2.3 using Tika 1.17 Analysis As we know, the core...

dex

dex - A federated OpenID Connect provider Dex is an identity service that uses OpenID Connectopenid-connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or...

CVE-2017-11882

CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

socid-extractor

socidextractor Convierte cualquier página de perfil público en un registro estructurado de cuenta: nombres de usuario, nombres mostrados, biografías, avatares, ubicaciones, fechas de registro, recuentos de seguidores, enlaces externos y los identificadores internos estables que identifican de for...

cve-2015-3306

cve-2015-3306 docker image hackarada/cve-2015-3306 Intended for personal use docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

CVE-2026-39767

The WPBase Cache plugin for WordPress versions

CVE-2026-39767 WordPress WPBase Cache plugin <= 5.5.6 - Denial of Service Attack vulnerability

Subscriber Denial of Service Attack in WPBase Cache = 5.5.6 versions...

CVE-2019-1476

CVE-2019-1476 AppXSvc Arbitrary File Overwrite DoS I have independently reported this vulnerability to MSRC as part of my research inspired by CVE-2019-0841 originally reported by Nabeel Ahmed. This vulnerability allows a regular user to overwrite arbitrary files. However, the attacker's...

CVE-2018-7842

CVE-2018-7842 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2023-43323

mooSocial: External HTTP and DNS Service Interaction CVE-2023-43323 mooSocial v3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. Vulerable Parameter: messageText , datawallphoto , datauserShareVideo and...

CVE-2026-8461

🎬 CVE-2026-8461 — PixelSmash Escritura Fuera de Límites Crítica en el Decodificador MagicYUV de FFmpeg Un archivo de video malicioso puede convertirse en un arma. PixelSmash es una vulnerabilidad crítica de corrupción de memoria que afecta al decodificador MagicYUV de FFmpeg, que permite a un...

ComoDoS

Technical Details see: https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html...

nmap-vulners

nmap-vulners Convierte un escaneo de servicios de nmap en una lista clasificada de CVEs, exploits y qué se está atacando en la naturaleza. Un script NSE que toma el software que nmap ya identificó, consulta a la base de datos de Vulners qué se sabe al respecto, e imprime la respuesta dentro del...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

Yasso

Yasso Potente conjunto de herramientas auxiliares de penetración en redes internas - Deja que Yasso vuele como el viento. Compatible con fuerza bruta en servicios como rdp, ssh, redis, postgres, mongodb, mssql, mysql, winrm, escaneo rápido de puertos, potente reconocimiento de huellas dactilares...

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

CVE-2023-46012

CVE-2023-46012 LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of LINKSYS EA7500 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2022-35737

CVE-2022-35737 Desbordamiento de enteros en la función sqlite3strvappendf de SQLite3. CVSS 6.7 AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-35737 fue introducido en SQLite versión 1.0.12 y corregido en la versión 3.39.2, disponible el 21 de julio de 2022. Es explotable en sistemas de 64 bits, y l...

alibaba__nacos_CVE-2021-44667_2-0-3

Nacos: Dynamic Na ming and Co nfiguration S ervice What does it do Nacos official site: nacos.io is an easy-to-use platform designed for dynamic service discovery and configuration and service management. It helps you to build cloud native applications and microservices platform easily. Service i...