ROOT-APP-MAVEN-CVE-2026-24734 CVE-2026-24734 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-24734 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-29129 CVE-2026-29129 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-29129 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34500 CVE-2026-34500 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-34500 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-32990 CVE-2026-32990 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-32990 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-25854 CVE-2026-25854 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-25854 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34486 CVE-2026-34486 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-34486 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ Un potente kit de herramientas de ingeniería social que automatiza phishing, bombardeo de OTP/correo, correo falso y más — creado con ❤️ por @karthithehacker ⚠️ Solo para uso educativo. No uses esta herramienta contra nadie sin permiso explícito. 📌 Características 🎯 Ataques...

ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root

Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-13311 CVE-2026-13311 in shell-quote - Patched by Root

Root has patched CVE-2026-13311 in the shell-quote package for Root:npm. Multiple fixed versions available...

CVE-2024-30167

PoC para Inyección de Comandos Autenticada en Atlona OME Descargo de responsabilidad : Esta prueba de concepto se proporciona únicamente con fines educativos y de investigación. No utilice este código en sistemas que no posea o para los que no tenga permiso explícito de prueba. No soy responsable...

ROOT-APP-NPM-CVE-2021-42740 CVE-2021-42740 in shell-quote - Patched by Root

Root has patched CVE-2021-42740 in the shell-quote package for Root:npm. Multiple fixed versions available...

cve-2025-29927

CVE-2025-29927-PoC-Exploit Prueba de concepto para la omisión de autorización en Next.js Middleware Puedes ejecutarlo contra una versión vulnerable aquí: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Ejecución La ejecución es sencilla. 1. Python3 CVE-2025-29927-PoC-Exploit.py Te...

Malicious code in pylever (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6720ca3891de59548dfdfc9b6af778b5bf97fb31c5188381c73e92c4ac2820e1 The package's Client class scans Chrome, Edge, and Brave browser profile LevelDB and Cache directories and the Discord Desktop app's Roaming/discord...

MAL-2026-16122 Malicious code in pylever (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6720ca3891de59548dfdfc9b6af778b5bf97fb31c5188381c73e92c4ac2820e1 The package's Client class scans Chrome, Edge, and Brave browser profile LevelDB and Cache directories and the Discord Desktop app's Roaming/discord...

CVE-2026-85645

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulkaction parameter in all versions up to, and including, 1.15.46 due to insufficient input sanitization and output escaping. This makes it...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...