CVE-2026-105675: Observable Discrepancy

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

PT-2026-106187

Name of the Vulnerable Software and Affected Versions Ghost versions 4.39.0 through 6.63.0 Description Staff users with permission to view staff invites can discover the secret token of pending invites. This includes invites for roles with higher privileges than the user's own, which could allow ...

CVE-2026-102777: Server-Side Request Forgery (SSRF)

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

Debian dla-4822 : ruby-oauth2 - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4822 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4822-1 [email protected] https://www.debian.org/lts/security/...

CVE-2026-59358 - UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type. | Cloud Foundry

Severity High CVSS score: 7.6 High CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Vendor Cloud Foundry Foundation Versions Affected Severity is High unless otherwise noted. UAA – All versions from UAA v3.7.0 to v79.6.0 inclusive; CF Deployment – All versions to v60.4.0 inclusive...

Linux Distros Unpatched Vulnerability : CVE-2026-105217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the...

DotCMS-CVE-2022-45782

CVE-2022-45782 – dotCMS Password Reset Token Predictability PoC This repository contains a proof-of-concept exploit for CVE-2022-45782, a vulnerability in dotCMS where password-reset tokens are generated using the non-cryptographic method RandomStringUtils.randomAlphanumeric. Because this token i...

CVE-2020-24033

La última versión de fs.com S3900 24T4S 1.7.1 y todas las versiones anteriores, CSRF en el administrador del backstage El formulario no cuenta con un mecanismo de autenticación ni de autenticación por token, por lo que existe una Cross-Site Request Forgery Agregar cuenta de usuario para añadir un...

MAL-2026-17525 Malicious code in tiny-css-token-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63fae51fceee7c4d3c5051e191e477ca9bb8302f6fc4d3d07f5446951efa0f Package is advertised as a CSS token parser but ships thunderboltRegistry.js which runs an IIFE on module load that collects hostname, pid, Node...

Malicious code in tiny-css-token-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63fae51fceee7c4d3c5051e191e477ca9bb8302f6fc4d3d07f5446951efa0f Package is advertised as a CSS token parser but ships thunderboltRegistry.js which runs an IIFE on module load that collects hostname, pid, Node...

CVE-2025-68860

CVE-2025-68860 El plugin Mobile builder de WordPress La vulnerabilidad de Omisión de autenticación mediante una ruta o canal alternativo en Mobile Builder permite el abuso de autenticación. Este problema afecta a Mobile builder desde n/a hasta 1.4.2. Puntuación CVSS: 9.8 CRÍTICA Vector:...

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE Este exploit reconstruye y explota el CVE-2019-16098, que se encuentra en el controlador Micro-Star MSI Afterburner 4.6.2.15658 también conocido como RTCore64.sys y RTCore32.sys, y permite a cualquier usuario autenticado leer y escribir en memoria arbitraria,...

CVE-2024-26229-BOF

CVE-2024-26229 BOF Implementación en Beacon Object File de CVE-2024-26229 — escalada de privilegios local del controlador CSC de Windows mediante robo de token DKOM. Basado en RalfHacker/CVE-2024-26229-exploit, convertido a BOF con resolución dinámica de funciones DFR para usar con frameworks C2...

ida-pro-mcp

IDA Pro MCP ⚠️ Archived — superseded by the official Hex-Rays IDA MCP server This project is no longer maintained. On 2026-09-27 Hex-Rays SA released the Official IDA MCP Server and IDA Nexus. Development stopped the same day at 1.0.0a4. For current use, install theirs: uvx ida-hcli mcp install. I...

CVE-2022-41544

Script de Explotación CVE-2022-41544 Este repositorio contiene un script para explotar la vulnerabilidad CVE-2022-41544 en GetSimple CMS. El script realiza varios pasos para verificar vulnerabilidades, filtrar claves API, establecer cookies, obtener tokens CSRF, subir un shell y activar el shell...

MetabaseRCE_CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 PoC Una prueba de concepto de CVE-2023-38646, un exploit de Metabase que permite al usuario ejecutar código de forma remota RCE utilizando el token de configuración encontrado en /api/session/properties para enviar un payload codificado en base64 Uso...

Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

Script de Bypass de Mitigación de Fuerza Bruta para Bludit Resumen Este script es una implementación en Bash revisada de un exploit dirigido a Bludit CMS versión = 3.9.2. Aprovecha una vulnerabilidad CVE-2019-17240 que permite forzar contraseñas por fuerza bruta evadiendo la protección basada en...

CVE-2021-34646

CVE-2021-34646 PoC detalle de esta vulnerabilidad por NVD Las versiones hasta la 5.4.3, inclusive, del plugin Booster for WooCommerce para WordPress son vulnerables a un bypass de autenticación a través de la función processemailverification debido a una debilidad en la generación de tokens...

CVE-2026-105217

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the worker token. Man-in-the-middle attackers on the outbound path to siteurl can present any certificate to steal the worker/web/token value an...

CVE-2026-105217 Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the worker token. Man-in-the-middle attackers on the outbound path to siteurl can present any certificate to steal the worker/web/token value an...