CVE-2023-25157

Lab CVE-2023-25157 y CVE-2023-25158 Este lab utiliza GeoServer/PostGIS para investigar la inyección SQL en filtros OGC en un entorno local, con separación clara entre el modo operador/setup y el modo atacante. CVE-2023-25157: superficie del producto GeoServer, las solicitudes WFS/WMS entran en la...

CVE-2026-73319

CVE-2026-73319: JavaScript URI accepted as a dynamic redirect XenForo before 2.3.13 accepts a same-host javascript: URI as a dynamic redirect and later assigns it to window.location. What happens Server-side redirect validation rejects foreign hosts but does not require HTTP or HTTPS. A URL shape...

PNGboomer-CVE-2026-77622

PNGboomer — CVE-2026-77622 Denial-of-service exploit for Sliver C2's HTTPS listener. Brute-forces the per-session PNG encoding nonce and delivers a decompression bomb that exhausts server memory. Published as GHSA-663m-7x7m-g4fw. Summary Sliver's HTTPS C2 channel wraps messages inside PNG images...

CVE-2026-96749

The MongoDB Python Driver is vulnerable to a heap out-of-bounds write within its bundled native extension's BSON document encoding component. The root cause is a signed 32-bit integer overflow occurring during size arithmetic when processing unusually large amounts of caller-supplied data. Becaus...

CVE-2026-96749 Heap out-of-bounds write via signed size overflow in BSON document encoding

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

CVE-2026-96749 Heap out-of-bounds write via signed size overflow in BSON document encoding

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

CVE-2026-96749

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

CVE-2026-96749 Heap out-of-bounds write via signed size overflow in BSON document encoding

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

EUVD-2026-86348

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Description A reflected cross-site scripting XSS vulnerability exists in /dashboard/settings.php in Bank Management System in Web 1.0. The vulnerability occurs due to improper sanitization of user-supplied input in the msg GET parameter. An attacker can craft a...

RLSA-2026:70640 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

skopeo security update

An update is available for skopeo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Command line utility to inspect images and repositories directly on Docker...

RLSA-2026:70641 Important: skopeo security update

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fixes: skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarsha...

CVE-2025-55315-detection-playground

Aquí hay algunas pruebas que se pueden realizar contra estos servicios para observar diferentes comportamientos en las rutas GET/POST entre las versiones parcheadas y no parcheadas de Kestrel. GET contra la versión no parcheada envía 200 y el socket permanece abierto printf 'GET / HTTP/1.1\r\nHos...

CVE-2021-4034

CVE-2021-4034 Implementación enlazada estáticamente de CVE-2021-4034 basada en la de Blasty que no necesita gcc. payload.so está codificado desde payload.h y se escribe en el disco. Binario compilado estáticamente incluido por conveniencia. PoC original y autor...

CVE-2025-55752

CVE-2025-55752: Vulnerabilidad de Path Traversal en Apache Tomcat Entorno de reproducción basado en Docker para CVE-2025-55752, una vulnerabilidad de path traversal en Apache Tomcat 10.1.44. Descripción general CVE-2025-55752 es una vulnerabilidad de path traversal en RewriteValve de Apache Tomca...

react2shell-cve-2025-55182

🚨 React2Shell - Framework de Explotación CVE-2025-55182 Framework de explotación avanzado para CVE-2025-55182 Ejecución Remota de Código en Next.js Autor: opsecramdan 📚 Tabla de Contenidos Visión General Detalles de la Vulnerabilidad Características Requisitos Instalación Uso Shell Interactivo...

CVE-2026-33331

CVE-2026-33331 — XSS almacenado en el plugin de referencia OpenAPI de oRPC Laboratorio de prueba de concepto para XSS almacenado en la generación de documentación OpenAPI de orpc Propósito oRPC construye páginas de documentación de API a partir de una especificación OpenAPI. Antes de la v1.13.9,...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0 Accept: / Origi...

apache-cve-2021-41773-lab

Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Usage Start the vulnerable server: ./apachelab.sh choose option 1 Manual exploit: curl --path-as-is...