foreman: Excessive Permissions for Viewer Role on Preview

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...

foreman: Excessive Permissions for Viewer Role on Preview

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...

GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments kwargs to functions such as Repo.clonefrom, Remote.fetch, Remote.pull, or Remote.push. This...

cachegrab

Cachegrab Cachegrab es una herramienta diseñada para ayudar a realizar y visualizar ataques de caché basados en trazas contra software en el mundo seguro de los núcleos ARMv8 con TrustZone. Para obtener una descripción general de cómo funciona Cachegrab internamente, consulte el anuncio de...

GO-2026-6570 Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei

Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei...

r2s

React2Shell R2S - Herramienta de Pruebas para CVE-2025-55182 Herramienta avanzada de pruebas de explotación para la evaluación de vulnerabilidades CVE-2025-55182 Características • Instalación • Uso • Entorno de Pruebas • Aviso Legal 📖 ¿Qué es R2S? R2S React2Shell es una herramienta de pruebas de...

CVE-2026-84682

A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on the Archer AX90 V1 router. An unauthenticated attacker on an adjacent network can exploit the setProductVer command handler to execute arbitrary operating system commands with root privileges during the device boot ...

CVE-2026-22812

CVE-2026-22812 CVE-2026-22812 - Plantilla de Nuclei para RCE no autenticado en OpenCode para escaneo. solicitud de burp suite POST /session HTTP/1.1 Host: target.com User-Agent: Mozilla/5.0 X11; Linux x8664 Content-Type: application/json Content-Length: 2 POST /session/"id"/shell HTTP/1.1 Host:...

CVE-2026-102369

Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthenticated attacker on the same local network can replay login challenge data to obtain an administrative session, enable a privileged service th...

CVE-2026-26831

CVE-2026-26831: Inyección de comandos del sistema operativo en textract Resumen textract hasta la versión 2.5.0 permite la inyección de comandos del sistema operativo a través de la ruta de archivo proporcionada a varios extractores. Varias rutas de código pasan esa ruta de archivo a...

CVE-2026-102369

TP-Link Tapo C120 v1 and C200 V5 security cameras are vulnerable to unauthenticated remote code execution due to insufficient protection of login challenge data and a lack of input sanitization in the MacTool handler . An attacker on the same local network can replay login challenge data to gain ...

EUVD-2026-90983

Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthenticated attacker on the same local network can replay login challenge data to obtain an administrative session, enable a privileged service th...

CVE-2026-23744-POC

CVE-2026-23744 — RCE no autenticado en servidores MCP Prueba de concepto PoC pord3vn0mi Resumen CVE-2026-23744 es una vulnerabilidad de Ejecución Remota de Código RCE no autenticada en servidores compatibles con MCP expuestos en el puerto 6274. El endpoint /api/mcp/connect acepta un objeto...

CVE-2021-4034

CVE-2021-4034 Versión compatible con CentOS 8 de CVE-2021-4034 Basado en una modificación de https://github.com/berdav/CVE-2021-4034/tree/main/dry-run Método de uso Modifica la función system en pwnkit-dry-run.c para ejecutar comandos personalizados por defecto añade el usuario r00t, con la...

CVE-2026-96659

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

CVE-2026-1357

CVE-2026-1357 Entorno de laboratorio para CVE-2026-1357 1. Construir el entorno sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

CVE-2024-12986

Escáner y Exploit para CVE-2024-12986 Este repositorio contiene un escáner y un exploit para la vulnerabilidad CVE-2024-12986 , que es una vulnerabilidad de inyección de comandos en el endpoint apmcfgupptim de los dispositivos gateway DrayTek. La vulnerabilidad permite a un atacante ejecutar...