CVE-2026-39363

CVE-2026-39363 Vulnerabilidad de Lectura Arbitraria de Archivos en el WebSocket del Servidor de Desarrollo de Vite Resumen de la Vulnerabilidad Atributo| Información ---|--- ID CVE| CVE-2026-39363 ID GHSA| GHSA-p9ff-h696-f583 Tipo de Vulnerabilidad| Arbitrary File Read Lectura Arbitraria de...

freelan

Esta carpeta contiene scripts para facilitar el desarrollo, las pruebas y la depuración...

PSCF

OWASP Product Security Capability Framework PSCF https://prods.ec/ El OWASP Product Security Capability Framework PSCF es una guía integral diseñada para estructurar y mejorar la seguridad de los productos de software. Mediante un enfoque estructurado para identificar, implementar y gestionar...

CVE-2019-5420

PoC de CVE-2019-5420 Una vulnerabilidad de ejecución remota de código en modo desarrollo Rails 5.2.2.1, 6.0.0.beta3 puede permitir a un atacante adivinar el token secreto generado automáticamente del modo desarrollo. Este token secreto puede usarse en combinación con otros componentes internos de...

CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

CVE-2025-5548 — Buffer Overflow en FreeFloat FTP Server 1.0 Laboratorio de análisis y explotación de vulnerabilidades · Exploit Development · Windows x86 ¿De qué trata este repositorio? Este repositorio documenta de forma completa el proceso de análisis y explotación de la vulnerabilidad...

CVE-Exploit-Research-Development-ITSOLERA

Este repositorio no tiene un README...

CVE-2019-0708-RCE

CVE-2019-0708-RCE CVE-2019-0708-RCE Estamos trabajando en un exploit totalmente funcional, únete a nosotros https://discord.gg/4kc72bZ...

cve-2024-3435

Este es un proyecto Next.js iniciado con create-next-app. Comenzando Primero, ejecuta el servidor de desarrollo: npm run dev or yarn dev or pnpm dev or bun dev Abre http://localhost:3000 con tu navegador para ver el resultado. Puedes empezar a editar la página modificando app/page.tsx. La página ...

CVE-2025-5548

Metodología de Análisis de Vulnerabilidades y Explotación Autor: Anas Rami Módulo: 6. Vulnerabilidades - Máster en Ciberseguridad Objetivo: Propuesta técnica sobre el análisis de vulnerabilidades, desarrollo de exploits y aproximación a 0-days, documentando el entorno de laboratorio y casos...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE Basado en mi investigación durante una prueba de penetración, consulte los detalles aquí https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

CVE-2026-102811

Marmite through 0.4.2 contains missing authentication in the development server endpoints /marmite/content, /marmite/config, and /marmite/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in...

CVE-2026-102811 Marmite through 0.4.2 Unauthenticated API Access via Development Server

Marmite through 0.4.2 contains missing authentication in the development server endpoints /marmite/content, /marmite/config, and /marmite/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in...

CVE-2026-102811 Marmite through 0.4.2 Unauthenticated API Access via Development Server

Marmite through 0.4.2 contains missing authentication in the development server endpoints /marmite/content, /marmite/config, and /marmite/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in...

CVE-2026-102810 Marmite through 0.4.2 Path Traversal via Development Server

Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handlerequest function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to...

CVE-2026-102810 Marmite through 0.4.2 Path Traversal via Development Server

Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handlerequest function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to...

CVE-2026-102810

Marmite versions through 0.4.2 are vulnerable to a path traversal vulnerability in the development server initiated via the --serve flag. The root cause is located in the handle_request function within src/server.rs, which fails to reject .. segments after percent-decoding and joining the request...

CVE-2026-102810 Marmite through 0.4.2 Path Traversal via Development Server

Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handlerequest function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to...

EUVD-2026-89110

Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handlerequest function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to...

CVE-2026-102811: Missing Authentication for Critical Function

Marmite through 0.4.2 contains missing authentication in the development server endpoints /marmite/content, /marmite/config, and /marmite/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in...

pwndbg v2026.09.15

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...