14546 matches found
PTP-RAT
PTP-RAT Exfiltrate data over screen interfaces More information about how the tool works can be found at https://www.pentestpartners.com/security-blog/exfiltration-by-encoding-data-in-pixel-colour-values/...
CodeIgniterXor
CodeIgniterXor PoC script to decode CodeIgniter = 2.1.4 session cookies that use xorencode method. Full details availalbe on on the following blog post: https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability Uso break.py Este es el script principal; dado un URI de destino,...
CVE-2026-37196
CVE-2026-37196 – Cross-Site Scripting XSS Almacenado en nirix traq v3.9.0 Descripción general Existe una vulnerabilidad de Cross-Site Scripting XSS Almacenado en nirix traq v3.9.0 , donde la entrada proporcionada por el usuario en el campo de descripción del ticket no se sanitiza adecuadamente...
Scanner-CVE-2021-41773
Scanner-CVE-2021-41773 Un escáner automático para Apache 2.4.49 • ejecutar: go run main.go O go build main.go && ./main • puedes personalizar tu payload • los hosts vulnerables se guardan Crea tu laboratorio: 1. Descargar imagen: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Ejecutar...
postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...
cve-2023-20198-poc-cisco
CVE-2023-20198-poc CVE-2023-20198 es una vulnerabilidad grave en la función de interfaz web del software Cisco IOS XE que permite a atacantes remotos no autenticados crear cuentas con nivel de privilegio 15 en sistemas afectados, lo que les otorga control total del dispositivo. Esta vulnerabilida...
cve-2022-21907
CVE-2022-21907 Aplicación Golang por 1vere$k CVE-2022-21907 - Double Free en el controlador http.sys. Resumen Esta es una aplicación Golang de subprocesos múltiples que permite hacer solicitudes a algunos objetivos simultáneamente. No es muy productiva con las solicitudes POST, pero proporciona...
postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...
postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...
CVE-2026-100891
A flaw was found in OpenDMARC. An encoding error in the Internationalized Domain Name IDN handler within the opendmarcpolicyquerydmarc function can cause domain name queries to fail or process incorrectly. A remote attacker could exploit this vulnerability by submitting specially crafted domain...
Zimbra Collaboration Suite < 8.8.15 - Improper Encoding
An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 update 1, as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
CVE-2026-100891
A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...
DEBIAN-CVE-2026-100891
A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...
CVE-2026-100891
A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...
EUVD-2026-88055
A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...
CVE-2026-100891
A vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The issue is located within the Internationalized Domain Name Handler component, specifically in the opendmarc_policy_query_dmarc function of the libopendmarc/opendmarc_policy.c library. An encoding error can be trig...
CVE-2026-100891 Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error
A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...
CVE-2026-100891: Encoding Error
A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...