CVE-2018-8065

Flexense HTTP Server Server-Enable web server on port. El módulo provoca una violación de acceso de escritura en el espacio de usuario en la región de memoria de syncbrs.exe. El número de peticiones que harán fallar el servidor varía entre 200 y 1000 dependiendo de la versión del sistema operativ...

CVE-2026-77113

Apport apport-unpack Recorrido de rutas CVE-2026-77113 https://youtu.be/CdM1Xtnx0uQ Un fallo de recorrido de rutas en apport-unpack de Apport permitía que claves de informe controladas por el atacante escaparan del directorio de extracción especificado. Un informe manipulado que contenga:...

CVE-2026-10053-lab

CVE-2026-10053 — laboratorio de verificación reproducible Laboratorio autónomo que demuestra el path traversal del registro de paquetes npm de GitLab CVE-2026-10053 y muestra que está corregido, usando un oráculo determinista en disco — no el estado HTTP. Qué se demuestra y qué no. Este laborator...

CVE-2026-19542 Stack-based out-of-bounds write in tdelete during tree rebalancing

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

CVE-2026-19542 Stack-based out-of-bounds write in tdelete during tree rebalancing

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

EUVD-2026-77685

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

CVE-2026-19542 Stack-based out-of-bounds write in tdelete during tree rebalancing

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

CVE-2026-19542

CVE-2026-19542 is a stack-based out-of-bounds write in the tdelete function of the GNU C Library (glibc) versions 2.1 through 2.44. The root cause is that two rebalancing branches in tdelete push an entry onto an alloca-allocated parent-node stack without checking capacity, writing one pointer pa...

CVE-2025-8110-gogs-poc

CVE-2025-8110 — Escritura Arbitraria de Archivos en Gogs PoC Prueba de concepto para una escritura arbitraria de archivos autenticada en Gogs. Al enviar un repositorio que contiene un enlace simbólico que apunta fuera del repositorio y luego actualizar el contenido de ese enlace a través de la AP...

CVE-2026-31694-POC

CVE-2026-31694: Desbordamiento de escritura en caché de readdir de FUSE Una verificación de límites faltante en fs/fuse/readdir.c:fuseadddirenttocache. Un servidor FUSE devuelve una entrada de directorio con namelen = 4095, que se serializa en un registro de 4120 bytes. El kernel lo copia en una...

IKEV2-POC

EpSiLoNPoInTIkEv2.cpp ⚠️ Proyecto en proceso de finalización. NO totalmente funcional en el estado actual. Descripción EpSiLoNPoInTIkEv2.cpp es un prototipo de exploit C/C++ dirigido a Windows, desarrollado en torno a una explotación de tipo double-free enikeext.dll controlador IKEv2 de Windows,...

CVE-2026-7275-moodle

CVE-2026-7275-moodle PoC y documentación para CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs — Path Traversal / Arbitrary File Write que puede conducir a RCE en versiones de Moodle sin parchear. Disclaimer: Solo para investigación de seguridad autorizada, auditoría y educació...

CVE-2024-45436

Exploit de Ollama CVE-2024-45436 Una implementación de exploit limpia y eficiente para la vulnerabilidad de recorrido ZIP de Ollama CVE-2024-45436. Documentación en chino: READMECN.md Descripción de la vulnerabilidad CVE-2024-45436 es una vulnerabilidad de recorrido de rutas también conocida como...

OESA-2026-3858 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

OESA-2026-3857 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

OESA-2026-3817 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

OESA-2026-3815 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

OESA-2026-3816 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

OESA-2026-3814 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

CVE-2023-41993

CVE-2023-41993 Exploit PoC This repository contains a Proof of Concept PoC exploit for the CVE-2023-41993 vulnerability. This PoC demonstrates limited read/write primitives based on the PoC released by po6ix. Demo of this PoC can be found here. Please make an issue if you have any questions,...