CVE-2026-80752 Input: psxpad-spi - set driver data before use

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...

CVE-2026-80752 Input: psxpad-spi - set driver data before use

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...

CVE-2026-80748 mmc: loongson2: Fix sg iteration in data reorder functions

In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500mmcreordercmddata and ls2k2000mmcreordercmddata, the foreachsg macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry...

CVE-2026-80748 mmc: loongson2: Fix sg iteration in data reorder functions

In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500mmcreordercmddata and ls2k2000mmcreordercmddata, the foreachsg macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry...

CVE-2026-73600

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73600

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-74769

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-74769

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass...

GEVAUDAN

GEVAUDAN Acceso a Datos y Aniquilación de Autenticación Vulnerable en Entorno Gluster. Primeros pasos Gevaudan es un exploit de Red Hat GlusterFS para los CVE 2018-1088 y 2018-1112. Disponible tanto en formato independiente como en módulo de Metasploit. Presentaciones | Fecha| Conferencia| Enlace...

tgspyder

🕷️ TGSpyder TGSpyder es una herramienta CLI de OSINT para Telegram de código abierto creada por Darksight Analytics. Características Extrae la lista de miembros de grupos públicos y privados a CSV Extrae los mensajes de chat de grupos públicos y privados a CSV Extrae enlaces de invitación t.me del...

CVE-2026-74768

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-74768

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-5287

🔥 WordPress Likes and Dislikes Plugin ≤ 1.0.0 - Inyección SQL sin autenticación 🧠 ID de CVE: CVE-2025-5287 Descubierto por: KhaledAlenazi Nxploited Publicado el: 27 de mayo de 2025 📋 Descripción El plugin Likes and Dislikes para WordPress es vulnerable a inyección SQL a través del parámetro post ...

CVE-2026-9852

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

M365Pwned

M365Pwned Herramientas de Red Team para la explotación de Microsoft 365 mediante la API de Microsoft Graph. Dos herramientas GUI de WinForms para enumerar, buscar y extraer datos de entornos M365 utilizando tokens OAuth a nivel de aplicación — sin interacción del usuario. Herramienta| Objetivo| Q...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versiones afectadas : Versiones de Spring Framework 5.3.0 a 5.3.17, 5.2.0 a 5.2.19 y versiones anteriores Java JDK 9 Versiones de Apache Tomcat inferiores a 10..0.20, 9.0.62 y 8.5.78 Las aplicaciones empaquetadas como un WAR tradicional con dependencia...

cve-2024-3094-tools

Herramientas para CVE-2024-3094 XZ Backdoor Este repositorio contiene herramientas para la vulnerabilidad del XZ Backdoor, también conocida como CVE-2024-3094. Acerca de CVE-2024-3094 CVE-2024-3094, también conocido como el XZ Backdoor, es una vulnerabilidad crítica descubierta en la librería de...

CVE-2025-8018

Exploit CVE-2025-8018 – Sistema de Revisión de Pedidos de Comida v1.0 Este repositorio proporciona un exploit de prueba de concepto PoC en Python para CVE‑2025‑8018 , una vulnerabilidad de inyección SQL de alta gravedad descubierta en el Sistema de Revisión de Pedidos de Comida v1.0. La...