WinboxPoC

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha finalizado y no recibirá más soporte ni...

PT-2026-104081

Name of the Vulnerable Software and Affected Versions Ninja Forms – The Contact Form Builder That Grows With You versions prior to 3.15.5 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping during Paragraph Text field submissions...

PT-2026-104439

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The message broker logs client connection credentials and the associated password in plain text during normal operation. This allows any party with read access to the log files, backups,...

PT-2026-104438

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The backup and restore routine records the full database connection command in plain text within a log file on the host. This includes the superuser password, which can be used to gain...

PT-2026-104145

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-96780

figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text and textSync can enter an unbounded loop when whitespaceBreak is enabled and width is smaller than the rendered width of a single FIGlet character. Under these conditions,...

cq

cq Code Query, una herramienta universal de escaneo de seguridad de código. CQ escanea código en busca de vulnerabilidades de seguridad y otros elementos de interés para revisores de código centrados en la seguridad. Genera archivos de texto con referencias a los problemas encontrados, en un...

ncccodenavi

ncccodenavi NCC Code Navi, el visor de texto y buscador para revisores de código Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Publicado bajo AGPL,...

CVE-2026-96780 figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width

figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text and textSync can enter an unbounded loop when whitespaceBreak is enabled and width is smaller than the rendered width of a single FIGlet character. Under these conditions,...

CVE-2026-96780 figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width

figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text and textSync can enter an unbounded loop when whitespaceBreak is enabled and width is smaller than the rendered width of a single FIGlet character. Under these conditions,...

CVE-2026-96780

The figlet.js library (a JavaScript FIG driver) is vulnerable to a Denial of Service via an unbounded loop in its text() and textSync() functions. The root cause is that when the whitespaceBreak option is enabled and the width is set smaller than a single FIGlet character, the breakWord() functio...

unredacter

Unredacter Te muestra por qué nunca, nunca, jamás deberías usar el pixelado como técnica de redacción. Para un análisis más completo de cómo funciona esto, consulta mi artículo en el blog aquí. Cómo Probarlo Instala las dependencias: npm install Después inicia con npm start Eso es todo. Cómo...

CVE-2025-60791

CVE-2025-60791 CVE-2025-60791: Almacenamiento en texto claro de información sensible en memoria. Easywork Enterprise 2.1.3.354 es vulnerable al almacenamiento en texto claro de información sensible en memoria. La aplicación deja claves de licencia válidas vinculadas al dispositivo en la memoria d...

CVE-2022-42889

🚀 Exploit CVE-2022-42889 Text4Shell Un exploit en Python para CVE-2022-42889 Text4Shell, una vulnerabilidad crítica de ejecución remota de código en Apache Commons Text versiones anteriores a 1.10.0. 📋 Tabla de Contenidos Descripción Detalles de la Vulnerabilidad Versiones Afectadas Característic...

WordPress Ninja Forms plugin <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission vulnerability

Unauthenticated Stored Cross-Site Scripting via Paragraph Text RTE Field Submission vulnerability discovered by UKO - Korea univ. in WordPress Plugin Ninja Forms versions = 3.15.4...

CVE-2025-62727-Demo

Demo CVE-2025-62727 Descripción de la víctima La víctima objetivo de CVE-2025-62727 es una aplicación FastAPI sencilla que: Sirve Hello World en /. Sirve archivos estáticos bajo /static usando StaticFiles de Starlette. Genera automáticamente archivos de texto que contienen A repetida N veces para...

Bolt-CMS-3.6.2---Cross-Site-Scripting

Bolt CMS 3.6.2 - Vulnerabilidad de Cross-Site Scripting Bolt CMS 3.6.2 - Vulnerabilidad de Cross-Site Scripting CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 Prueba de Concepto Para explotar la vulnerabilidad, Bolt CMS 3.6.2 permite XSS a través de la entrada de texto al hacer clic en el...

WAInjectBench

WAInjectBench WAInjectBench is a comprehensive benchmark for prompt injection detection in web agents. It covers 6 types of attacks , across two modalities : text and image. 📂 Dataset Structure data/ text/ benign/ → 4 categories, stored as JSONL files malicious/ → 8 attack types, stored as JSONL...

CVE-2026-22849

CVE-2026-22849: Saleor carece de una sanitización adecuada de HTML en los campos de texto enriquecido Resumen Campo| Detalles ---|--- ID CVE| CVE-2026-22849 Gravedad| ALTA Aviso| Ver aviso Descubierto por| Lukasz Rybak Productos afectados saleor/saleor Detalles Saleor permitía a los usuarios...

GHSA-G9CG-PRRW-2R8Q pypdf: Possible large memory usage when parsing font data

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /Widths entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds I...