CVE-2024-44193

Hackeando Windows a través de iTunes - Escalada de Privilegios Local 0-day Presentando CVE-2024–44193 Este es un informe sobre CVE-2024–44193, un exploit de Escalada de Privilegios Local en iTunes versión 12.13.2.3. Fue parcheado el 12 de septiembre de 2024 por Apple. Enlace al aviso de seguridad...

CVE-2023-30212-Lab

CVE-2023-30212-Lab Repositorio de GitHub con Dockerfile y archivos para crear un entorno vulnerable para CVE-2023-30212, permitiendo explorar la explotabilidad de esta vulnerabilidad de seguridad. Ideal para investigadores y entusiastas de la seguridad que deseen estudiar y comprender el impacto ...

CVE-2024-48990-PoC

PoC para CVE-2024-48990 en needrestart solo con fines educativos https://www.qualys.com/2024/11/19/needrestart/needrestart.txt ¿Cómo ejecutarlo? Ejecutar ./start.sh compilará la librería importlib falsa e iniciará un script que espera a que needrestart sea ejecutado por root. Después abrirá una...

zerologon

zerologon Comprueba eventos que indican dispositivos no compatibles - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 En agosto, Microsoft publicó un parche para CVE-2020-1472. Con ese parche hay un período de espera hasta el 9 de febrero de 2021 en el que se...

Exploit_CVE-2020-0688

CVE-2020-0688 Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability" Usage: root@kitploit: powershell -exec bypass -file .\CVE-2020-0688.ps1 -xaml -uri Example: This is an example of vulnerability validation by seting header in response...

OPENSUSE-SU-2026:21861-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: Update to version 2.100.0, fixing two deadlock issues in the vendored golang.org/x/crypto/ssh library reachable via crafted SSH channel messages CVE-2026-56854, CVE-2026-56855, CVE-2026-78662, bsc1278604: Fix gh api telemetry disableme...

CVE-2026-81896

Concrete CMS before 9.5.3 is affected by a stored cross-site scripting (XSS) vulnerability in the Dashboard Form Submissions report. The root cause is a missing HTML entity encoding on user-defined Form block question labels when rendered as column headers in the file concrete/single_pages/dashbo...

CVE-2026-81896 Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions report concrete/singlepages/dashboard/reports/forms/legacy.php. a rogue editor could store markup or script in a label...

CVE-2026-81896 Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions report concrete/singlepages/dashboard/reports/forms/legacy.php. a rogue editor could store markup or script in a label...

EUVD-2026-78928

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions report concrete/singlepages/dashboard/reports/forms/legacy.php. a rogue editor could store markup or script in a label...

CVE-2026-18111 Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification

Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting XSS in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 in the feature and Image blocks because the external link URL was insufficiently validated by the link filter and was rendered withou...

CVE-2026-18111

CVE-2026-18111 is a stored XSS in Concrete CMS affecting the Feature, Feature Link, Hero Image, and Image blocks in versions before 9.5.3 (and before 8.5.21 in the 8.x line). The root cause is that external link URLs were insufficiently validated by the link filter and rendered without output esc...

CVE-2026-18111 Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification

Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting XSS in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 in the feature and Image blocks because the external link URL was insufficiently validated by the link filter and was rendered withou...

EUVD-2026-78839

Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting XSS in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 in the feature and Image blocks because the external link URL was insufficiently validated by the link filter and was rendered withou...

EUVD-2026-78833

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting XSS via the Gallery block's per-image Caption field because the bundled Magnific Popup lightbox script concrete/js/features/imagery/frontend.js re-parses the attribute-decoded caption as HTML through jQuery's...

CVE-2026-81894

Concrete CMS 9.5.2 and below contains a stored DOM-based XSS in the Gallery block's per-image Caption field. The root cause is that the bundled Magnific Popup lightbox script (concrete/js/features/imagery/frontend.js) re-parses the attribute-decoded caption as HTML via jQuery's .append() in title...

CVE-2026-81894 Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting XSS via the Gallery block's per-image Caption field because the bundled Magnific Popup lightbox script concrete/js/features/imagery/frontend.js re-parses the attribute-decoded caption as HTML through jQuery's...

CVE-2026-81894 Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting XSS via the Gallery block's per-image Caption field because the bundled Magnific Popup lightbox script concrete/js/features/imagery/frontend.js re-parses the attribute-decoded caption as HTML through jQuery's...

CVE-2024-20767

Script de prueba de concepto para CVE-2024-20767 Visión general get-the-files.py es un script de Python que explota una vulnerabilidad en servidores Adobe ColdFusion CVE-2024-20767 para leer archivos del servidor. El script se basa en un método descrito en https://jeva.cc/2973.html. Descargo de...

CVE-2024-0204

CVE-2024-0204: Inmersión Profunda en la Bypass de Autenticación de Fortra GoAnywhere MFT Este repositorio contiene un exploit de prueba de concepto para la vulnerabilidad de bypass de autenticación CVE-2024-0204 descubierta en el producto GoAnywhere MFT de Fortra. La vulnerabilidad permite que un...