cve-2024-6387-poc

cve-2024-6387-poc una condición de carrera en el manejador de señales en el servidor de OpenSSH sshd...

CVE-2026-104891

mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx-token-gate 1.0.4, the packages read a wallet address from the client-supplied credential.source, checked whether that public address met...

CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE

CVE-2026-4040 – Condición de carrera en la subida de archivos que conduce a RCE Código del programa Python Flask uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads' os.makedirsUPLOADDIR,...

CVE-2025-60719-AFD.SYS

!IMPORTANT Esta prueba de concepto tiene fines exclusivamente de demostración y aprendizaje. Úsala con precaución. CVE-2025-60719-AFD.SYS Los investigadores de Akamai han creado una nueva capacidad de IA para el análisis instantáneo de la causa raíz. La herramienta es un sistema multiagente...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 Escalada de privilegios root de DirtyCow Dirty COW era una vulnerabilidad de condición de carrera en el kernel de Linux. Esta vulnerabilidad residía en las funciones del kernel que gestionan la funcionalidad de copy-on-write COW de los mapeos de memoria y, al ser...

CVE-2026-104891 mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control

mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx-token-gate 1.0.4, the packages read a wallet address from the client-supplied credential.source, checked whether that public address met...

CVE-2026-104891 mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control

mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx-token-gate 1.0.4, the packages read a wallet address from the client-supplied credential.source, checked whether that public address met...

CVE-2026-104891

The @insumermodel/mppx-condition-gate and @insumermodel/mppx-token-gate packages are vulnerable to an authentication bypass where the software grants free-access receipts based on a wallet address provided in the client-supplied credential.source. The underlying cause is that the system fails to ...

CVE-2026-104891 mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control

mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx-token-gate 1.0.4, the packages read a wallet address from the client-supplied credential.source, checked whether that public address met...

watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309

CVE-2025-54309 Una prueba de concepto de omisión de autenticación de CrushFTP Vea nuestra publicación en el blog https://labs.watchtowr.com/ para detalles técnicos Detección en acción python3 watchTowr-vs-CrushFTP-CVE-2025-54309.py http://127.0.0.1:8082 Generated new c2f value: 6XDQ / | | |\ \ \ ...

uaf-exploit-cve-2026-23415

CVE-2026-23415 PoC Prueba de concepto para CVE-2026-23415 , una vulnerabilidad de use-after-free en el subsistema futex del kernel de Linux. Acerca de la vulnerabilidad Existe una condición de carrera entre futexkeytonodeopt y vmareplacepolicy. Mientras el código de futex lee la política de memor...

CVE-2024-28999

CVE-2024-28999 Exploit para CVE-2024-28999 Vulnerabilidad de condición de carrera en SolarWinds Platform - página de inicio de sesión Se determinó que SolarWinds Platform está afectada por una vulnerabilidad de condición de carrera que afecta a la página de inicio de sesión de la consola web...

CVE-2022-3328

CVE-2022-3328 CVE-2022-3328 con CVE-2022-41974 y CVE-2022-41973 de: https://www.qualys.com/2022/11/30/cve-2022-3328/advisory-snap.txt https://blog.qualys.com/vulnerabilities-threat-research/2022/11/30/race-condition-in-snap-confines-mustmkdirandopenwithperms-cve-2022-3328...

CVE-2025-53136

CVE-2025-53136 Divulgación de información del kernel a través de condición de carrera . https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43511 https://www.crowdfense.com/nt-os-kernel-information-disclosure-vulnerability-cve-2025-53136/...

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in...

Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and...

SUSE-SU-2026:4507-1 Security update for the Linux Kernel (Live Patch 53 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.214 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and...

Triple_Fetch-Kernel-Creds

Triple-Fetch-Kernel-Creds Intento de robar credenciales del kernel desde launchd + puntero taskt Basado en: CVE-2017-7047 Acerca de Triple Fetch por Ian Beer de Google Project Zero Triple Fetch es un exploit para dispositivos iOS anteriores a iOS 10.3.3. Explota un error lógico en libxpc que...