CVE-2023-28467

MyBB 1.8.33 XSS persistente en email del Panel de Control de Usuario - MyBB 1.8.33 User CP email persistent XSS - Mybb version "@cve.com Solución Actualiza MyBB a la versión 1.8.34 o superior...

CP-PLUS-EZ-P21-CVE-2026-65893-65894

🔐 Security Analysis of the CP PLUS EZ-P21 IP Camera CVE-2026-65893 CVE-2026-65894 Arbitrary Code Execution & Improper Authentication – CP PLUS EZ-P21 IP Camera Overview This repository documents two security vulnerabilities identified in the CP PLUS EZ-P21 IP Camera , an IP-based surveillance...

CVE-2019-1002101-Helpers

kubectlcpCVE-2019-1002101 PoC helper scripts and Dockerfile for CVE-2019-1002101 For detailed info, goto https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/ and...

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...

CP Image Store with Slideshow <= 1.0.67 - SQL Injection

The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the orderingby query parameter before using it in a SQL statement in pages where the codepeople-image-store is embed, allowing unauthenticated users to perform an SQL injection attack. id: CVE-2022-1692...

CVE-2026-17106

CVE-2026-17106 — CopyEscape:docker cp 컨테이너에서 호스트로의 임의 파일 쓰기 HackSpeak 배포 이미지입니다. 이 저장소는 Imperva 레드팀Ron Masas이 공개한 CopyEscape PoCCVE-2026-17106의 배포 이미지 이며, 코드는 업스트림과 일치합니다. 업스트림에 LICENSE가 포함되어 있지 않아 배포 관례에 따라 MIT License, Copyright c 2026 HackSpeak 를 적용하며, 소스 코드의 저작권은 원저작자에게 있습니다. ⚠️ 보안 연구 및 승인된 테스...

CopyEscape-CVE-2026-17106

CopyEscape: docker cp로 Docker 호스트 장악하기 CVE-2026-17106 이 저장소는 블로그 게시물 CopyEscape:docker cp로 Docker 호스트 장악하기 — CVE-2026-17106에 대한 개념 증명PoC 저장소입니다. CopyEscape를 사용하면 악성 실행 컨테이너가 Docker의 아카이브 생성 프로세스와 경쟁하여 일관되지 않은 tar 스트림을 만들 수 있습니다. 취약한 Docker CLI는 추출 중에 심어진 심볼릭 링크를 따라가 docker cp를 실행하는 사용자가 선택한 로컬 대상...

CVE-2026-104678

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-104678 CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

EUVD-2026-94183

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-104678

The CP Media Player WordPress plugin (versions before 1.3.4 ) is vulnerable to an improper access control flaw in its settings-page handler . Due to a lack of capability checks, users with only Contributor-level access can perform actions reserved for administrators, such as creating, modifying, ...

CVE-2026-104678 CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

WordPress CP Media Player plugin < 1.3.4 - Contributor+ Media Player Settings Update vulnerability

Contributor+ Media Player Settings Update vulnerability discovered by Ryan Fabella in WordPress Plugin CP Media Player versions 1.3.4...

PT-2026-107406

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2022-24734

PoC de CVE-2022-24734 Se puede obtener una RCE en el Panel de Administración de MyBB en Configuración - Añadir Nuevo Ajuste. El usuario debe tener derechos para añadir o actualizar un ajuste. Esto está probado en MyBB 1.8.29. Fuentes: https://github.com/mybb/mybb/...

Astra Linux – Vulnerability in binutils

There is a heap-based buffer overflow issue in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. A crafted input can cause segmentation faults, leading to denial-of-service attacks, as demonstrated by c++filt...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/rds: fixed the possible null dereference of cp The cp parameter may be null. Calling cp-cpconn would result in a null dereference. Simon Horman adds: Analysis: cp is a parameter of rdsrdmamap, and it is not reassigned. The...

PT-2026-106219

Name of the Vulnerable Software and Affected Versions Chainguard Academy edu integrate-platform-docs composite GitHub Action versions from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff through commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 Description Improper neutralization of special element...

CP-XR-DE21-S--4G-Router-Vulnerabilities

CP-XR-DE21-S--4G-Router-Vulnerabilities Este informe corresponde al CVE-2025-44039 reservado para la vulnerabilidad UART del router asignada al descubridor Yashodhan Vivek Mandke. Por favor, descarga el informe PDF en este repositorio...

CentOS Linux 6 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1775148022)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1775148022 advisory. - A buffer overflow vulnerability in function gnuspecial in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of...