CVE-2016-2569

Hola, Gracias por leer mi primera entrada en el blog. Hoy vamos a crear un exploit para una de las herramientas de código abierto, el servidor proxy de caché Squid. ¿Qué es Squido? Squid es un proxy de caché para la Web que soporta HTTP, HTTPS, FTP y más. Reduce el ancho de banda y mejora los...

smack

SMACK es tanto una herramienta modular de verificación de software como un verificador de software autocontenido. Se puede utilizar para verificar las aserciones en sus programas de entrada. En su modo predeterminado, las aserciones se verifican hasta un límite dado en iteraciones de bucles y...

vaas-cve-2015-5477

Vulnerabilidad como servicio - CVE 2015-5477 Un sistema Linux Debian Wheezy con una versión vulnerable de bind9 para mostrar el CVS-2015-5477. Descripción general Este contenedor docker está basado en Debian Wheezy y se ha modificado para usar una versión vulnerable de bind9 y las dependencias...

EUVD-2026-76569

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

Aviso de seguridad: Denegación de servicio remota mediante aserción alcanzable en el manejo de prefijos de URL rouille CVE ID asignado: CVE-2026-66754 Resumen Request::removeprefix comprueba la URL decodificada en porcentaje, pero hace la aserción sobre la URL cruda. Una solicitud cuya ruta...

Oracle Linux 10 : glibc (ELSA-2026-500297)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500297 advisory. - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing RHEL-180652, RHEL-185612 - CVE-2026-5928: Fix ungetwc operating on byte stream...

vcenter_saml_login

vCenter SAML Login Tool A tool to extract the Identity Provider IdP cert from vCenter backups and log in as Administrator Background Commonly, during engagements, we will gain access to vCenter backups on a fileserver or gain root access to the VCSA host through recent CVEs. Logging into the...

CVE-2026-89043

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...

CVE-2026-89043 passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...

CVE-2026-89043 passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...

EUVD-2026-75632

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...

CVE-2026-89043

passport-saml-encrypted through version 0.1.13 is affected by an XML signature wrapping vulnerability. The root cause is that signature verification and assertion extraction use independent XPath lookups with no cross-validation (see saml.js lines 256 and 328). An attacker holding any validly sig...

CVE-2026-75584

ION-DTN before 4.2.1-a.1 contains a denial-of-service vulnerability in the canonicalizePayloadBlock() function in bpsec_util.c . The function passes bundle->payload.length to zco_clone() without validating it against zero. An unauthenticated remote attacker can send a BPv7 bundle with a zero-l...

CVE-2026-75584 ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion

ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsecutil.c passes bundle-payload.length to zcoclone without...

DRUPAL-CONTRIB-2026-150

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently prevent reuse of previously accepted SAML assertions. Under certain circumstances, a valid assertion may be...

DRUPAL-CONTRIB-2026-145

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly restrict which signature algorithm may be used to validate a SAML assertion, allowing the algorithm to be influenc...

CVE-2026-86756

Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint SamlController::acs, POST /saml/acs. The endpoint wrote the RelayState POST parameter directly into Laravel's url.intended session key with only CR/LF characters stripped, and...

CVE-2026-86756

Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint (SamlController::acs, POST /saml/acs). The endpoint wrote the RelayState POST parameter directly into Laravel's url.intended session key after stripping only CR/LF characters, and LoginCon...

Linux Distros Unpatched Vulnerability : CVE-2026-82059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal...

Security Advisory 0172

Security Advisory 0172 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73438 CVSSv3.1 Base Score: 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 7.0...