htb-labs-nexus

🏴‍☠️ HTB Labs - Nexus English 🇺🇸 | Español 🇪🇸 English | Español 📋 Panoramica Nexus è una macchina Linux di difficoltà Facile di Hack The Box che dimostra una catena di attacco multi-fase che coinvolge enumerazione di virtual host, credenziali esposte, funzionalità vulnerabili di applicazioni web,...

winrar-exploit

Descrição Esta é a minha implementação do exploit CVE-2025-8088 do Winrar. Ele usa Fluxos de Dados Alternativos ADS e correção de caminho dentro do arquivo. Quando uma vítima extrai o arquivo infectado, o payload ADS corrigido ex.: executável, script powershell ou algum png engraçado é...

CVE-2026-49825

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

CVE-2026-15679

A flaw was found in Hugging Face PyTorch Image Models. A remote attacker could exploit a deserialization of untrusted data vulnerability by enticing a user to visit a malicious page or open a malicious file. This could lead to arbitrary code execution in the context of the current process. The fl...

CVE-2026-76230

A flaw was found in Renovate. This vulnerability, a command injection, exists within the npm manager due to improper sanitization of user-provided package names. An attacker with write access to a repository can exploit this by crafting malicious Renovate configuration files. This allows them to...

CVE-2026-76226

A flaw was found in Renovate. This vulnerability affects the bazel-module and bazelisk managers when processing lockFileMaintenance. A remote attacker can exploit this by providing malicious dependencies, leading to the execution of arbitrary code. This occurs when these dependencies are referenc...

CVE-2026-16239

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

CVE-2024-47176

CVE-2024-47176 CUPS Common UNIX Printing System est un système d'impression qui utilise principalement des protocoles comme IPP Internet Printing Protocol pour gérer les travaux et les files d'attente d'impression. Le 27 septembre 2024, des détails sur une exécution de code à distance dans Unix...

CVE-2026-81753

Flowintel versions >= 3.3.0 are affected by a stored XSS vulnerability in case notes that contain Mermaid diagram blocks . Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note can store a crafted Mermaid payload that...

EUVD-2026-67009

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

CVE-2026-81753 Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

CVE-2026-81753 Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

CVE-2018-16373

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:11+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-28 00:00:55+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-29 00:00:15+00:00| published-proof-of-concept|...

CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

EUVD-2026-67007

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

CVE-2026-81743

Flowintel versions >=3.3.0 allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this value, an attacker with high privileges can set LOG_...

CVE-2026-66155

A vulnerability has been identified in Element maps-ng V47 All versions V47.12.3, Element maps-ng V48 All versions V48.11.3, Element maps-ng V49 All versions V49.16.1. The si-map component does not properly neutralize user-controllable input of the points property that is used to render the toolt...

CVE-2026-66155

Siemens Element maps-ng (V47, V48, V49) is affected by an XSS vulnerability in the si-map component. The root cause is improper neutralization of user-controllable input in the points property, which is used to render the tooltip label of map pins . An attacker can craft a malicious URL that, whe...

CVE-2026-80563

A flaw was found in the Linux kernel's gpio: sloppy-logic-analyzer component. A local attacker with root privileges can exploit a race condition during the unbinding of a platform device. This vulnerability allows writing into memory that has already been freed, which can lead to system instabili...