CVE-2026-87920 W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all versions up to, and including, 2.10.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite

A flaw was found in httpd's modcharsetlite module. A heap-based buffer overflow an out-of-bounds memory write occurs in the finishpartialchar function when handling character set conversions. A remote attacker can exploit this flaw by sending specially crafted requests, leading to memory...

httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2026-96578

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE y escalada de privilegios en Windows Plataforma: TryHackMe Sistema operativo objetivo: Windows 7 / Windows Server 2008 R2 Dificultad: Fácil Categoría: Desbordamiento de búfer RCE, escalada local de privilegios Resumen Este informe documenta el compromiso complet...

CVE-2025-5548

Rompiendo FreeFloat FTP: análisis y explotación de CVE-2025-5548 Anderson Steven — Máster en Ciberseguridad, Módulo 6 Vulnerabilidades Entrega individual: Metodología de análisis de vulnerabilidades y explotación Por qué este repositorio No quería entregar simplemente "aquí está el exploit...

CVE-2026-96578 GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-96578 GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

S5Late

S5Late Exploit atado de bootrom/DFU para iPod. Actualmente solo es compatible con Nano 7G; para admitir Nano 6G es necesario actualizar los offsets. Ejecución Pon tu iPod en modo DFU. Luego ejecuta: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode...

Moderate: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

A flaw was found in Ghostscript. This heap-based buffer overflow vulnerability in the JPEG 2000 output adapter allows an attacker to cause memory corruption by supplying a specially crafted PDF file. The crafted PDF contains a JPEG 2000 image with mismatched component subsampling factors...

panos-captive-portal-rce

CVE-2026-0300 — Escáner de RCE por Desbordamiento de Búfer en el Portal C cautivo de User-ID de PAN-OS 🎯 Descripción general Desbordamiento de búfer en el servicio del Portal de Autenticación User-ID Portal C cautivo de PAN-OS. Un atacante no autenticado puede ejecutar código como root en los...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - Desbordamiento de enteros JNI de LLaMA-Android en llama.cpp PoC complementario para el artículo de Hunt-Benito "Una multiplicación de más: CVE-2026-70638 — Desbordamiento de enteros en la asignación de montón JNI de Android de llama.cpp" →...

[SECURITY] [DLA 4813-1] open-iscsi security update

Debian LTS Advisory DLA-4813-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 02, 2026 https://wiki.debian.org/LTS Package : open-iscsi Version : 2.1.8-1+deb12u1 CVE ID : CVE-2026-18724 CVE-2026-18725 CVE-2026-18726 CVE-2026-18727 CVE-2026-18728...

CVE-2026-42533-POC

CVE-2026-42533 Desbordamiento de búfer en el heap y fuga de información del heap antes de la autenticación en nginx, causados por la falta de guardado/restauración del estado de las capturas de PCRE entre las dos pasadas del motor de scripts. Una variable map con regex evaluada entre dos...

gvfs security update

An update is available for gvfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GVFS is the GNOME Desktop Virtual File System layer that allows users to easily...

RLSA-2026:74370 Important: gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure Shell File Transfer Protocol SFTP, Web Distributed Authoring and Versioning WebDAV, Common Internet File System CIFS, Server Message Block SMB, and...

MS17-010

MS17-010 Este repositorio es para mi trabajo público sobre MS17-010. No tengo planeado dar soporte. Todos los problemas de soporte no recibirán respuesta de mi parte. Archivos BUG.txt Detalle del bug MS17-010 y algo de análisis checker.py Script para encontrar named pipe accesible...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – Desbordamiento de búfer en mensaje NAS 5G en gNodeB Código del programa simulación en C // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t...

nginx-cve-2026-42945-poc

CVE-2026-42945 — Desbordamiento de búfer en el montículo del Módulo Rewrite de NGINX → RCE RCE confirmado exitoso — mediante desbordamiento de montículo + inyección de proceso GDB, ejecuta comandos arbitrarios en los procesos worker de NGINX / OpenResty. Inicio rápido 一键构建 NGINX 镜像 + 执行 RCE 测试...