CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Semilla débil en la corrección de errores de distribución de claves cuánticas Código del programa Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from...

EUVD-2026-86236

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-93231

The Linux kernel contains a vulnerability in the lockd component where the nlmsvc_match_ip() function uses swapped arguments. When releasing locks by server IP address via /proc/fs/nfsd/unlock_ip , the function incorrectly compares a struct sockaddr as a struct nlm_host, leading it to read garbag...

CVE-2026-93225

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

EUVD-2026-86228

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

CVE-2026-93225 phy: fsl-imx8mq-usb: fix typec switch leak on probe error path

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

CVE-2026-93225

The Linux kernel contains a vulnerability in the fsl-imx8mq-usb phy driver where a typec switch leak occurs during the probe error path. Specifically, if imx95_usb_phy_get_tca() succeeds but the subsequent probe fails, the switch leaks because the cleanup path was only located in .remove(), which...

php_filter_chains_oracle_exploit

Cadenas de filtros PHP: lectura de archivos desde un oráculo basado en errores Una CLI para explotar parámetros afectados por la lectura de archivos causada por el oráculo basado en errores de las cadenas de filtros PHP. Puede utilizarse para filtrar el contenido de un archivo local cuando se pas...

EUVD-2026-85332

REDAXO: Unwhitelisted ORDER BY Column in rexlist Allows Authenticated Column Enumeration...

REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration

Summary The rexlist component reads the SQL sort column directly from the sort GET parameter without validating it against the set of columns declared sortable via setColumnSortable. Although the value is wrapped in backticks via escapeIdentifier preventing classical SQL injection, this still...

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Detector de SQLi de solo lectura y seguro para /admin/ajax.php de FreePBX, centrado en los parámetros template, model y brand. 🛡️ Utiliza técnicas basadas en errores , booleanas y basadas en tiempo para señalar posibles inyecciones sin modificar la base de datos. ✍️...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability 🌐 ⚠️ Overview 🚨 High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! 💥 An unauthenticated remote attacker can crash the device with crafted RADIUS packets. 📅 Disclosed : November 5, 2025 ✅ No known...

CVE-2021-39377

VULNERABILIDAD DE INYECCIÓN SQL EN OPENSIS 8.0 CVE-2021-39377 Existe una vulnerabilidad de inyección SQL en la versión 8.0 de openSIS cuando se usa MySQL MariaDB como base de datos de la aplicación. Un atacante malintencionado puede enviar comandos SQL a la base de datos MySQL MariaDB a través de...

CVE-2026-4638

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

CVE-2025-62168

CVE-2025-62168 — Squid Proxy Token Leak PoC The author assumes no liability for misuse or damage caused by this tool. Research is provided strictly for educational and defensive purposes. Description This repository contains a Proof-of-Concept PoC for CVE-2025-62168 , an information-disclosure fl...

CVE-2026-85682

The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wprest nonce to window.opener via postMessage with a wildcard targetOrigin. This makes it possible for unauthenticated attackers to ste...

msmailprobe

msmailprobe Office 365 和 Exchange 枚举 众所周知，OWA（Outlook Webapp）容易受到基于时间的用户枚举攻击。该工具利用所有已知甚至一些鲜为人知的、默认 Exchange 安装暴露的服务来枚举用户。它还针对 Office 365 进行基于错误的用户枚举。 开始使用 如果你想下载并编译这个简单且无依赖的代码，你必须首先安装 GoLang！让那些出色的文档和其他在线资源帮你完成这项任务吧。 https://golang.org/doc/install 你也可以在此处下载编译好的发行版。 语法 列出该应用程序的命令示例，只需使用 examples...

CVE-2026-85682

The YOP Poll plugin for WordPress (versions up to and including 7.0.10 ) is vulnerable to an Origin Validation Error . The root cause is the plugin transmitting a wp_rest nonce to window.opener via postMessage() using a wildcard targetOrigin . This allows an unauthenticated attacker to steal a RE...

CVE-2026-85682 YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route

The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wprest nonce to window.opener via postMessage with a wildcard targetOrigin. This makes it possible for unauthenticated attackers to ste...

EUVD-2026-85816

The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wprest nonce to window.opener via postMessage with a wildcard targetOrigin. This makes it possible for unauthenticated attackers to ste...