CVE-2026-85544

CVE-2026-85544 is an Improper Encryption Configuration vulnerability affecting some Hikvision Intercom Products . The flaw allows an attacker with physical access to forge M1 cards , leading to high confidentiality impact and low integrity impact (CVSS 3.1: 5.2 MEDIUM ). No specific product model...

invokeai

invokeai Este repositorio es un objetivo de demostración sintético para Endor Labs EXPOSURE. El estado actual es deliberadamente vulnerable HOT. EXPOSURE reportará un veredicto HOT en su contra. CVE rastreado: CVE-2024-10821 sin corrección ascendente; mitigado solo mediante un control...

CVE-2026-88271

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

http-server-node

http-server-node Este repositorio es un objetivo de demostración sintético para Endor Labs EXPOSURE. El estado actual es deliberadamente vulnerable HOT. EXPOSURE reportará un veredicto HOT contra él. CVE rastreado: CVE-2021-23797 sin corrección upstream; mitigado solo mediante un control...

node-prompt-here

node-prompt-here Este repositorio es un objetivo de demostración sintético para Endor Labs EXPOSURE. El estado actual es deliberadamente vulnerable HOT. EXPOSURE reportará un veredicto de HOT en su contra. CVE rastreado: CVE-2020-7602 sin parche oficial; mitigado solo mediante un control...

httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration

A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...

CVE-2026-0303

CVE-2026-0303 is currently reserved with no public technical details available. The affected product, root cause, and impact are not yet disclosed. Monitor for updates when the holder publicizes the vulnerability.

CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

Apache Solr <= 7.1 - XML Entity Injection

Apache Solr with Apache Lucene before 7.1 is susceptible to remote code execution by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external...

DataTaker DT80 dEX 1.50.012 - Information Disclosure

DataTaker DT80 dEX 1.50.012 is susceptible to information disclosure. A remote attacker can obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI, thereby possibly accessing sensitive information, modifying data, and/o...

FortiLogger 4.4.2.2 - Arbitrary File Upload

FortiLogger 4.4.2.2 is affected by arbitrary file upload issues. Attackers can send a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then Assets/temp/hotspot/img/logohotspot.asp. id: CVE-2021-3378 info: name: FortiLogger 4.4.2.2 - Arbitrary File Upload author:...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

MSNSwitch Firmware MNT.2408 - Authentication Bypass

MSNSwitch Firmware MNT.2408 is susceptible to authentication bypass in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh. An attacker can arbitrarily configure settings, leading to possible remote code execution and subsequent unauthorized operations. id: CVE-2022-32429 info: name:...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - 认证绕过，提取管理员用户和LDAP配置 - 此PoC仅执行只读操作。 运行漏洞利用 root@kitploit: USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com 运行nuclei模板 root@kitploit: echo https://target.com | nuclei -t CVE-2022-40684.yaml...

dotclaude-security

dotclaude-security Escanea la configuración local .claude/ de un repositorio — hooks de settings.json, definiciones de servidores MCP, bloques env, permissions.allow — en busca de los peligros de RCE y exfiltración de claves de API que se activan en el momento en que haces git clone y abres un...

CVE-2026-31431-mitigation-suite

Marco de Defensa AFALG Un marco de defensa en tiempo de ejecución del kernel para el subsistema AFALG Address Family Algorithm, familia 38 de Linux. Diseñado para Centros de Operaciones de Seguridad que gestionan flotas empresariales de Linux donde Zero Trust debe extenderse hacia el kernel, no...

CVE-2025-32463

CVE-2025-32463 Exploit --- Prueba de Concepto PoC AVISO LEGAL: Este repositorio contiene una prueba de concepto destinada únicamente a fines educativos, investigación defensiva y pruebas de penetración autorizadas. NO utilice este código en sistemas que no sean de su propiedad o para los que no...

tapo-c260-rce

Cadena RCE Tapo C260 CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Prueba de concepto de cadena de explotación para la cámara IP TP-Link Tapo C260 que logra RCE de no autenticado a root encadenando tres vulnerabilidades descubiertas por Eugene Lim Spaceraccoon. Créditos Toda la investigación y el...

PP_CVE-2024-38998

PPCVE-2024-38998 A vulnerability CVE-2024-38998 was identified in version 2.3.6 of the requirejs JavaScript module. It exploits prototype pollution in the config function, allowing attackers to modify Object.prototype with malicious inputs. This can cause DoS, remote code execution RCE, or XSS. T...

CVE-2026-25769---CVE-2026-25770

CVE-2026-25769 / CVE-2026-25770 – Wazuh 集群漏洞 警告：本仓库包含与安全漏洞相关的信息和代码。请仅用于教育目的或在授权环境中使用。 描述 在 Wazuh 集群配置（版本 ≥ 4.0.0）中发现了两个严重漏洞。这些缺陷影响使用多节点进行水平扩展、负载均衡和高可用性的部署。该配置允许管理多个代理而不会影响 Wazuh 服务器。 CVE-2026-25769 允许通过 DAPi 请求在主节点（master）和工作节点（worker）之间进行通信。工作节点使用 LocalClient 模块发送对象；主节点接受该消息并使用易受攻击的函数...