cve-2023-23397-detection-lab

CVE-2023-23397 Detection & Mitigation Research Lab Overview This project is a defensive cybersecurity research lab focused on the network behavior associated with CVE-2023-23397. The project studies suspicious outbound SMB and NTLM authentication from a Windows endpoint and demonstrates a complet...

CVE-2026-23744-PoC

CVE-2026-23744-PoC Descargo de responsabilidad: Esta prueba de concepto se proporciona exclusivamente para investigación de seguridad autorizada, fines educativos y entornos de laboratorio controlados p. ej., HTB, CTF o pruebas de penetración internas con consentimiento explícito por escrito. El...

CVE-2026-9198

CVE-2026-9198 Causa de la vulnerabilidad: IBM Langflow OSS es un software de código abierto diseñado específicamente para construir y desplegar flujos de trabajo automatizados de agentes IBM Langflow OSS 1.0.0 a 1.10.0 tiene el inicio de sesión automático habilitado por defecto autologin es true ...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — Lectura arbitraria de archivos en streamhandler de ml-logger Este repositorio proporciona un script Python independiente — CVE-2025-10952.py — que explota una vulnerabilidad de lectura arbitraria de archivos sin autenticación en streamhandler de ml-logger, encadenada con el...

CVE-2026-56723

The Zammad helpdesk and customer support system contains an authorization bypass in versions prior to 7.0.2 . While internal ticket articles are correctly hidden from customers via the article listing API, the attachment download endpoint fails to enforce article-level authorization. This allows ...

EUVD-2026-87205

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer who can view a ticket cannot see internal ticket articles through the article listing API. However, the same customer can directly request an attachment belonging to an internal article via the attachme...

amasty-chekout-POC-rce

CVE-2026-53787 - Amasty Order Attributes Carga de archivos no autenticada Descripción CVE-2026-53787 es una vulnerabilidad crítica de carga de archivos arbitrarios no autenticada en la extensión Amasty Order Attributes para Magento 2 en versiones anteriores a la 4.0.0. La vulnerabilidad permite a...

EUVD-2026-87202

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function of the file SecurityConfig.java of the component api-docs Endpoint. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely...

CVE-2026-97879

A security flaw exists in zhistaredu StarTraining up to version 3.8.1 within the api-docs Endpoint . The vulnerability stems from an unknown function in the SecurityConfig.java file, which allows for missing authentication via remote manipulation. An exploit has been released to the public and ma...

EUVD-2026-87238

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...

CVE-2026-67410 RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...

CVE-2026-67237 RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or accesstoken cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the...

CVE-2026-75430_PowerJob_worker_deployContainer_RCE

Ejecución Remota de Código No Autenticada en PowerJob Worker a través de /worker/deployContainer Carga Arbitraria de JAR 1. Resumen El Worker de PowerJob expone el manejador deployContainer en su puerto de transporte HTTP 27777 sin autenticación alguna. Un atacante envía una URL arbitraria; el...

TwoMillion-Machine-Writeup

Acerca de la máquina TwoMillion es una máquina Linux de dificultad Easy que fue lanzada para celebrar la llegada de 2 millones de usuarios en HackTheBox. La máquina incluye una versión antigua de la plataforma HackTheBox que contiene el antiguo código de invitación pirateable. Después de hackear ...

CVE-2026-97865

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...

CVE-2026-97865 Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...

CVE-2026-97865

A security flaw in Open-Web-Analytics (up to version 1.8.1) allows for remote deserialization . The vulnerability exists within the Event::loadFromArray function in the queue.php file of the Remote Event Queue Endpoint component. An attacker can initiate this attack remotely by performing manipul...

EUVD-2026-87090

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...

CVE-2026-97865 Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...

CVE-2025-69985

FUXA ≤ 1.2.8 Bypass de autenticación + RCE CVE-2025-69985 📜 Descripción Este exploit en Python ataca CVE-2025-69985, una vulnerabilidad crítica de omisión de autenticación en FUXA software SCADA/HMI basado en web versiones ≤ 1.2.8. Al enviar una carga útil JSON manipulada con código Node.js...