EUVD-2026-91853

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

CVE-2026-104477: Improper Neutralization of Input During Web Page Generation

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

SUSE SLES15 Security Update : kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4415-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4415-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4433-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4433-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: -...

CVE-2026-19794

CVE-2026-19794 WP-Stats = 2.56 - Cross-Site Scripting Almacenado No Autenticado URL del Plugin https://wordpress.org/plugins/wp-stats/ Descripción XSS reflejado no autenticado en el parámetro GET statsauthor de statspage. El filtro de saneamiento striptags se aplica antes de urldecode, lo que...

CVE-2026-104477

The Showdown library (versions through 2.1.0 ) is vulnerable to Cross-Site Scripting (XSS) due to a flaw in the makehtml link and image subparsers. The root cause is the failure to properly sanitize or escape double quotes in destination URLs when rendering HTML attributes like href and src. A re...

CVE-2026-31787

XSA-487 / CVE-2026-31787 Doble liberación en el kernel de Linux en el controladorprivcmd de Xen Una doble liberación de memoria del kernel en el controlador privcmd de Xen del kernel de Linux permite eludir el bloqueo del kernel arranque seguro. La explotación requiere acceso a nivel de root, lo...

CVE-2026-19264

CVE-2026-19264 - Path Traversal no autenticado hasta la toma de control total de la instancia en Postiz Autor: Krithik Babu P @DarkLycn1976 Publicado: 2026-08-10 CVE: CVE-2026-19264 Severidad: Crítica - CVSS 4.0 9.3 / CVSS 3.1 9.8 CWE: CWE-22 - Limitación inapropiada de un nombre de ruta a un...

SUSE-SU-2026:4433-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension header...

Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextc...

Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

A flaw was found in the Linux kernel, specifically within the RDMA Remote Direct Memory Access vmwpvrdma module. This vulnerability is a double free, which means the system attempts to release the same memory resource twice. This can occur in an error handling path within the pvrdmaallocucontext...

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

SUSE-SU-2026:4415-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

cve-2025-62215-exploit-poc

CVE-2025-62215 Prueba de Concepto ⚠️ ADVERTENCIA - AVISO LEGAL Y ÉTICO ESTE CÓDIGO ES SOLO PARA FINES EDUCATIVOS Y DE INVESTIGACIÓN EN SEGURIDAD. NO utilice este código en sistemas que no posea o para los que no tenga permiso explícito por escrito para realizar pruebas NO utilice este código con...

CVE-2026-23918

Detector de Doble Liberación CVE-2026-23918 Apache modhttp2 https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT --crash-threshol...

CVE-2026-25243

CVE-2026-25243 — double-free doble liberación de Redis RESTORE → ejecución remota de código Verificado contra Rocky Linux 8.10, aarch64, Redis 8.6.2, jemalloc 5.3.0. Referencia: https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR; Exploit estable, funciona contra varias...

dvenom

🐍 Double Venom DVenom Double Venom DVenom 是一款帮助红队绕过防病毒软件的加密封装与加载器工具，用于处理你的 shellcode。 🚀 功能特性 🛡️ 能够绕过一些知名防病毒软件 AV。 🔒 提供多种加密方式：RC4、AES256、XOR 和 ROT。 🏗️ 生成 C、Rust、PowerShell、ASPX 和 VBA 格式的源代码。 🔄 采用不同的 shellcode 加载技术：VirtualAlloc、Process Injection、NT Section Injection、Hollow Process Injection。 🎓 快速上手...

CVE-2021-42013

CVE-2021-42013 易受攻击的服务 安装 有几种选择： 1. Docker 容器 docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t apache2450cve-2021-42013 . docker run -d -p...

Linux Distros Unpatched Vulnerability : CVE-2026-103679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format TNEF file...