CVE-2026-22812-exploit

Herramienta de Explotación CVE-2026-22812 Kit de explotación completo para CVE-2026-22812 - RCE no autenticado en OpenCode 🎯 Descripción general La Herramienta de Explotación CVE-2026-22812 es un framework de explotación integral para la vulnerabilidad de ejecución remota de código no autenticada...

cve-2026-21509-mitigation

Script de Mitigación CVE-2026-21509 Versión en chino tradicional: READMEzh-TW.md Descripción general Este script aplica una mitigación basada en el registro para proteger contra CVE-2026-21509 vulnerabilidad de omisión de la característica de seguridad de Microsoft Office, que ha sido explotada...

windows-smb-vulnerability-framework-cve-2025-33073

Marco de Investigación de Vulnerabilidades del Cliente SMB de Windows Autor: cyberseallll Creado: 2025 Descripción General Desarrollé este marco de investigación para analizar y comprender CVE-2025-33073, una vulnerabilidad crítica de Elevación de Privilegios en el Cliente SMB de Windows. Esta...

CVE-2026-22730-Scanner

Escáner y Exploit CVE-2026-22730 – Inyección SQL en el Vector Store MariaDB de Spring AI Una herramienta profesional de evaluación de seguridad para CVE-2026-22730 – una vulnerabilidad crítica de inyección SQL descubierta en el vector store MariaDB de Spring AI. Esta herramienta permite a...

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

SummaryThe built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidad Crítica de Omisión de Autenticación 🧾 Resumen 🔥 Una vulnerabilidad de severidad máxima 10.0 que permite acceso remoto sin autenticación a sistemas middleware de Oracle. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication...

msdt-follina

msdt-follina Microsoft MS-MSDT Follina Vulnerabilidad de día cero CVE-2022-30190 Vector de ataque...

CVE-2025-492026

Aviso de seguridad: CVE-2025-492026 Resumen Se ha identificado una vulnerabilidad en Copilot AI que hace que se incluya un hipervínculo no deseado en la sección "fuente del enlace" cada vez que Copilot recupera una consulta web. Este problema ha provocado que los usuarios hagan clic en enlaces a...

CVE-2021-44228

CVE-2021-44228 El 9 de diciembre de 2021 el mundo conoció una nueva falla de seguridad relacionada con Log4J. La puntuación CVSSv3 Common Vulnerability Scoring System de la vulnerabilidad fue evaluada en 10, lo que la convierte en nivel crítico https://nvd.nist.gov/vuln/detail/CVE-2021-44228...

Additive-Vulnerability-Analysis-CVE-2021-41773

Additive-Vulnerability-Analysis-CVE-2021-41773 Apache: un servicio web convencional convertido en un vector de ataque para la ejecución remota de código...

cve-2018-6574

cve-2018-6574 gcc -shared -o attack.so -fPIC attack.c...

DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-

= doi.org/10.5281/zenodo.18287026 = orcid.org/0009-0007-7728-256X Proyecto: Análisis Exhaustivo de DDoS Purple Elite Teaming 2026 Autor: SASTRAADIWIGUNA PurpleEliteTeaming ⚠️ AVISO LEGAL OBLIGATORIO Este repositorio y su documentación son estrictamente para investigación educativa, defensiva y de...

Rocky Linux 8 [CIQ] Security Update: polkit / polkit-debuginfo / polkit-debugsource / polkit-devel / etc (crlsa-2022_0267)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220267 advisory. polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector CVE-2021-4034 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2021_3027)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213027 advisory. hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache Eviction Sampling CVE-2020-0549...

Rocky Linux 10 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlsa-2025_11066)

The Rocky Linux 10 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202511066 advisory. glibc: Vector register overwrite bug in glibc CVE-2025-5702 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlsa-2025_9877)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259877 advisory. glibc: Vector register overwrite bug in glibc CVE-2025-5702 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

CVE-2026-103226

A stack-based buffer overflow vulnerability exists in Artifex Ghostscript up to version 10.09.0 . The flaw is located in the type1_callsubr function within the devices/vector/gdevpsfx.c file of the Pdfwrite component. This vulnerability allows for remote exploitation , and it is noted that an exp...

EUVD-2026-89962

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

Linux Distros Unpatched Vulnerability : CVE-2026-103226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the compone...