io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder

A flaw was found in Netty, a network application framework, specifically within the StompSubframeDecoder component. This vulnerability allows a remote attacker to cause a denial of service DoS by sending a large number of small headers. The decoder fails to properly limit the total number or...

io.netty/netty-handler-ssl-ocsp: Netty: Certificate revocation bypass via OCSP response replay attack

A flaw was found in Netty. The OcspClient component fails to validate that the Certificate ID in an Online Certificate Status Protocol OCSP response matches the requested Certificate ID. This vulnerability allows a remote attacker to bypass certificate revocation checks by presenting a legitimate...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows 内核权限提升漏洞 Windows 内核堆栈缓冲区溢出漏洞，允许本地攻击者将权限提升至NT AUTHORITY\SYSTEM 。 📖 概览 CVE-2026-40369 是一个影响 Microsoft Windows 内核组件的高严重性权限提升漏洞。 该漏洞源于 Windows 内核内部的不安全内存操作，可能允许经过身份验证的低权限攻击者在受影响的系统上获取 SYSTEM 级别权限 。Microsoft 将其 CVSS v3.1 评分定为 7.8（高危）。 :contentReferenceoaicite:0index=0 ⚡ 漏洞详情...

CVE-2026-94210

A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function getAllGrouped of the file app/Domain/Tickets/Services/Tickets.php of the component Kanban Board. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. Th...

libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

CVE-2025-27591

CVE-2025-27591 低于 v0.9.0 版本的 PoC 权限提升利用 免责声明 此利用仅用于教育目的 。它旨在帮助用户理解安全漏洞并提高他们的网络安全知识。作者不纵容任何非法活动或未经授权的系统访问。请负责任地使用此信息，并且仅在您拥有明确测试权限的环境中操作。 描述： 在 v0.9.0 之前的 Below 服务中存在一个权限提升漏洞，原因是创建了世界可写目录 /var/log/below。这可能允许本地非特权用户通过符号链接攻击（操纵诸如 /etc/shadow 等文件）提升至 root 权限。...

skill-safety-bench

SkillSafetyBench SkillSafetyBench is a fully materialized benchmark for evaluating safety failures caused by attacks on skill-facing context. Each case keeps the user-facing task ordinary, while the attack is placed in local skills, helper scripts, sidecar files, corpora, templates, or other...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

KidnapRAG

KidnapRAG: Un Ataque de Caja Negra para Secuestrar el Razonamiento en Sistemas de Generación Aumentada por Recuperación RAG Basados en Agentes 🎓 Paper | 📄 Datasets | 🚀 Inicio Rápido Inicio Rápido Ejecute los siguientes comandos desde el directorio padre del repositorio clonado KidnapRAG...

EVTX-ATTACK-SAMPLES

Muestras EVTX de Windows 200 ejemplos de EVTX: Este es un contenedor de muestras de eventos de Windows asociados a técnicas específicas de ataque y post-explotación. Puede ser útil para: Probar tus scripts de detección basados en el análisis de EVTX Entrenar en DFIR y caza de amenazas usando...

CVE-2024-55347

CVE 披露：CVE-2024-55347 CVE-2024-55347 公开披露 🚀 日期： 10-02-2025 摘要 Kroll Artifact Parser And Extractor KAPE v1.3.0.2 中存在一个二进制植入漏洞，攻击者可通过将恶意构造的二进制文件放置到特定目录中提升权限并执行任意代码。该漏洞可能导致未经授权的系统访问以及敏感数据的潜在泄露。 受影响产品 供应商： Kape by Eric Zimmerman 产品： kape.exe 版本： 1.3.0.2 漏洞描述 KAPE 产品团队、其开发者以及 CVE Mitre 已被告知 Kroll...

CVE-2021-3395

CVE-2021-3395 Descripción sugerida Una vulnerabilidad de cross-site scripting XSS en Pryaniki 6.44.3 permite a usuarios autenticados remotos cargar un archivo arbitrario. El código JavaScript se ejecutará cuando alguien visite el archivo adjunto. Tipo de Vulnerabilidad Cross Site Scripting XSS...

CVE-2020-24032

CVE-2020-24032 Descripción sugerida tz.pl en los appliances virtuales XoruX LPAR2RRD y STOR2RRD 2.70 permite la inyección de comandos del sistema operativo mediante metacaracteres de shell en una zona horaria, a través de cmd=set&tz=OS. Tipo de vulnerabilidad Otro Inyección de comandos del sistem...

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 permite recorrido de directorios en el componente del sitio web Vulnerability Type Directory Traversal Vendor of Product Stakater Affected Product Code Base Forecastle = v1.0.144 Affected Component Componentes afectados: URL -...

scan-shai-hulud

scan-shai-hulud Un escáner Bash rápido y sin dependencias para detectar si tu máquina está afectada por el ataque a la cadena de suministro CVE-2026-45321 "Mini Shai-Hulud". El 11 de mayo de 2026, más de 170 paquetes npm y 2 paquetes PyPI de TanStack, Mistral AI, UiPath, OpenSearch y Guardrails A...

EUVD-2026-83867

The RestroPress WordPress plugin before 3.4.6 does not validate a client-supplied item add-on price on the server side when items are added to or updated in the cart, allowing unauthenticated users to set an arbitrary price and place orders for an attacker-chosen total, down to and including zero...

mt6985-CVE-2026-43499

Registro de fallo CVE-2026-43499: Intento de adaptación MT6985 Conclusión : Gasté 68M tokens, no obtuve root. Causa : El ataque de temporización KernelSnitch no es fiable en MTK Dimensity 9200, CONFIGPANICONOOPS=y no deja margen para prueba y error. Este artículo documenta el proceso completo de...

CVE-2026-38764

CVE-2026-38764 Un problema en Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 permite a un atacante local escalar privilegios a través del controlador de kernel pgsecdl.sys...

CVE-2026-94149

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...

CVE-2026-94150 Omega Solution HRM OS SVG File Upload view cross site scripting

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...