CVE-2020-1938-Clean-Version

CVE-2020-1938-Clean-Version CVE-2020-1938GhostCat versión de código limpia y legible Yo...

git-clean-filter

Este es un problema documentado conocido, pero lo encontré durante mi investigación y es bastante útil para RT/PT. Resumen: La directiva filter..clean en .git/config apunta a un script y .gitattributes vincula ese filtro a un archivo rastreado. Cada vez que git renderiza un git diff real de ese...

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

readme2demo

readme2demo — tutoriales verificados y videos demo desde tu README ▶ readme2demo generando su propio tutorial: un agente de IA ejecuta el README de este repositorio en un sandbox, un contenedor nuevo reproduce cada paso, luego se renderiza el demo. Salida completa de auto-ejecución en...

Process-Dump

Process Dump Process Dump es una herramienta de línea de comandos de ingeniería inversa para Windows que permite volcar componentes de memoria de malware de vuelta al disco para su análisis. A menudo, los archivos de malware están empaquetados y ofuscados antes de ejecutarse para evitar los...

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Instalación Instale el paquete metashieldcleanup usando pip:: root@kitploit: pip install metashieldcleanup Uso Ejemplo para limpiar un archivo. .. code-block:: python root@kitploit: import time import base64 from metashieldcleanup.api...

CVE-2025-46206

There is a denial of service vulnerability in MuPDF 1.25.6 and earlier versions. When an attacker runs the "mutool clean poc /dev/null" command, the program will fall into an infinite recursion between the stripoutlines and stripoutline functions in pdf-clean-file.c until the stack is exhausted...

CVE-2026-98138

In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in syncfs when errors were recorded ntfsputsuper and the remount-read-only path both clear the dirty bit only when NVolErrorsvol is false. ntfssyncfs clears it unconditionally, so any sync on a...

WordPress Clean Login plugin < 1.19 - Unauthenticated CAPTCHA Bypass vulnerability

Unauthenticated CAPTCHA Bypass vulnerability discovered by Arthur Morgan in WordPress Plugin Clean Login versions 1.19...

CLEANSTART-2026-ZY15804 Security fix for CVE-2018-20843 applied in: expat 2.2.7-r0

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HE16906 Security fix for CVE-2024-25710 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-25710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NE99818 Security fix for CVE-2026-54513 applied in: activemq 6.1.8-r1, activemq 6.2.8-r2, activemq 6.3.1-r1, apache-hive 4.1.0-r5, apache-nifi 2.10.0-r3, apache-nifi 2.6.0-r3, apache-nifi-registry 2.9.0-r3, cassandra 5.0.8-r1, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.1.1-r2, cassandra-reaper-fips 4.2.5-r1, confluent-kafka 8.3.0-r1, elasticsearch 9.3.5-r2, elasticsearch 9.4.4-r4, gradle 8.14.5-r1, hazelcast 5.7.0-r1, kafka 4.3.1-r1, keycloak 26.4.13-r1, keycloak 26.4.7-r4, keycloak 26.5.7-r5, keycloak 26.6.3-r3, keycloak 26.6.4-r1, keycloak 26.7.0-r1, kserve-modelmesh 0.12.0-r17, logstash-fips 9.4.3-r1, rundeck 6.0.0-r2, rundeck 6.0.1-r0, s3proxy 3.3.0-r1, solr 9.10.1-r7, solr 9.8.1-r1, solr 9.9.0-r1, sonarqube 26.3.0.120487-r4, spark 3.5.9-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.4.4-r1, spark-sc213-jdk17-py312 3.5.8-r0, spark-sc213-jdk17-py312 4.0.3-r0, spark-sc213-jdk17-py312 4.1.2-r0, strimzi-kafka-operator 1.1.0-r1, trino 480-r7, wso2is 7.0.0-r1, wso2is 7.1.0-r1, wso2is 7.2.0-r1

CVE-2026-54513 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-90977

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...

CVE-2026-90976

The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an account in its registration handler, allowing unauthenticated users to create accounts even when the site has registration disabled...

EUVD-2026-82689

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...

CVE-2026-90977 Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...

CVE-2026-90977

The Clean Login WordPress plugin prior to version 1.19 fails to verify the registration CAPTCHA when the stored session value is empty. This allows unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving the CAPTCHA. The vulnerabili...

CVE-2026-90977 Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...

WordPress Clean Login plugin < 1.19 - Unauthenticated Account Creation with Registration Disabled vulnerability

Unauthenticated Account Creation with Registration Disabled vulnerability discovered by Artus KG in WordPress Plugin Clean Login versions 1.19...

CVE-2026-90976 Clean Login < 1.19 - Unauthenticated Account Creation with Registration Disabled

The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an account in its registration handler, allowing unauthenticated users to create accounts even when the site has registration disabled...