redStackPRO

redStackPRO A web canvas where you build infrastructure as a topology, then export a complete, runnable working directory of Terraform and Ansible. You run it from your own machine. redStackPRO never holds your cloud credentials. !IMPORTANT redStackPRO is in prerelease beta. The schema and featur...

EUVD-2026-92965

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount, allowing unauthenticated users to have orders marked as paid without any payment being...

CVE-2026-95153

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

CVE-2026-95153

A vulnerability exists in Bludit CMS 3.22.0 that allows a remote attacker to obtain sensitive information . The issue is accessible via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints. No specific root cause, exploit details, or remediation steps are provided in the available docum...

PT-2026-106804

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

EUVD-2026-93552

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

siras

SIRAS v3.0 es un moderno marco de simulación automatizada de respuesta a incidentes de seguridad diseñado para gestionar ejercicios de equipo rojo como código. Puede ejecutar simulaciones de seguridad controladas que ponen a prueba su plan de respuesta a incidentes en escenarios realistas. El...

WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin Video Background Block – Use video as background in the section. versions = 2.0.3...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

EUVD-2026-92260

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

Adaptive-Shot Hybrid Quantum Anomaly Detection for Tactile Internet Security: Reliability-Aware Measurement Allocation under Resource Constraints

Tactile Internet TI security analytics must balance reliable thresholded decisions with constrained computational and measurement resources. We study this tension for finite-shot hybrid quantum anomaly inference and introduce the Adaptive-Shot Variational Quantum Circuit AS-VQC policy. This...

VulnCheck KEV: CVE-2024-23625

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

VulnCheck KEV: CVE-2026-95675

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

Malicious code in chai-as-testmode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e91a44a2eb0773df19fce2096660c285bafbe846a5f09d8bb25ff0eba22b2 The package masquerades as the pino logging library README badges and lib/ contents mimic pino but ships a dropper at lib/initializeCaller.js. A...

MAL-2026-17473 Malicious code in chai-as-testmode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e91a44a2eb0773df19fce2096660c285bafbe846a5f09d8bb25ff0eba22b2 The package masquerades as the pino logging library README badges and lib/ contents mimic pino but ships a dropper at lib/initializeCaller.js. A...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identificada en la función createSessionInternal del archivo PackageInstallerService.java, es una vulnerabilidad de alta gravedad que afecta a Android versiones 12 y 13. Esta vulnerabilidad permite a un atacante realizar un ataque «run-as any app», lo que conduce a un...

CVE-2024-0044

CVE-2024-0044 Resumen CVE-2024-0044 es una vulnerabilidad descubierta en ciertas aplicaciones Android que permite a los atacantes escalar privilegios explotando una falla en el comando run-as. Esta vulnerabilidad puede explotarse mediante la creación de un payload específico que otorga acceso no...

Java-Shellcode-Loader

Java ShellCode Loader Cargador de ShellCode implementado en Java, compatible con plataformas de 32 y 64 bits. El principio central es utilizar Jna para llamar a las API de Windows y lograr la inyección de shellcode. Entorno de ejecución: Jre = 1.5 Nota: este proyecto ya está integrado en el módul...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn, presentado en BlackHat Europe 2010 – esta versión incorpora CVE-2010-0738, la vulnerabilidad de omisión de autenticación de JBoss mediante manipulación del verbo VERB, descubierta por Minded Security C. Papathanasiou 2010 INTRODUCCIÓN Este script de JBoss implementa u...