Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

Summary The Cline Hub dashboard server @cline/cline-hub, launched via the cline dashboard CLI command, accepts WebSocket connections on the /browser endpoint without validating the HTTP Origin header. When ROOMSECRET is not set—the default for local 127.0.0.1 binds—isAuthorizedBrowserRequest...

@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

Summary The default Rsdoctor report HTTP server started by @rsdoctor/rspack-plugin binds to all network interfaces 0.0.0.0 and serves a POST /api/data/key endpoint with no authentication and wildcard CORS Access-Control-Allow-Origin: . Any network-adjacent or remote attacker can send a single...

yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

!NOTE This finding was identified during an agentic unsafe Rust code review performed by Gemini AI, followed by human review and verification. The Issue The crate exports a public safe API Rules::deserialize accepting any generic byte sequence B: AsRef. It restores compiled rule structures direct...

Dozzle label filters do not restrict container event and statistics streams

Summary Dozzle supports per-user label filters in users.yml that are documented as an access-control boundary: "Filters are used to restrict the containers that a user can see" and "the guest user can only see containers with the label com.example.app … useful for restricting access to specific...

dockerlabs-los-3-hackers

🐳 DockerLabs — Los 3 Hackers Write-up Autor de la máquina...

CVE-2026-97425

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing...

CVE-2026-79766

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 Una reproducción de exploit de prueba de concepto de la vulnerabilidad del kernel de Linux CVE-2026-31431 , también conocida como Copy Fail. Créditos a: Copy Fail Sistemas Afectados Versiones del kernel de Linux 4.14 y posteriores La mayoría de las distribuciones...

magika

Magika Magika 是一款基于 AI 的新型文件类型检测工具，依靠深度学习的最新进展提供精确的检测。在幕后，Magika 使用了一个定制的高度优化模型，该模型仅重约几 MB，即使在单个 CPU 上运行，也能在毫秒内实现精准的文件识别。Magika 在包含约 1 亿个样本、覆盖 200 多种内容类型（包括二进制和文本文件格式）的数据集上进行了训练和评估，在我们的测试集上达到了平均约 99% 的准确率。 以下是 Magika 命令行输出的示例： Magika 被大规模用于提升 Google 用户的安全性，通过将 Gmail、Drive 和 Safe Browsing...

Demo_CVE-2025-3248

DemoCVE-2025-3248 — PoC educativo Propósito: Simular la vulnerabilidad CVE-2025-3248 en un entorno aislado para aprender sobre seguridad de la información: montar un laboratorio, observar el comportamiento explotable y discutir medidas de mitigación. ⚠️ DECLARACIÓN LEGAL Y ÉTICA SOLO USO ÉTICO Tod...

CVE-2026-24061-POC

CVE-2026-24061 Bypass de Autenticación Remota en GNU inetutils-telnetd Puntuación CVSS: 9.8 Crítico Resumen Una vulnerabilidad en GNU inetutils-telnetd permite a atacantes remotos omitir la autenticación mediante la opción telnet NEWENVIRON. Al enviar una variable de entorno USER manipulada que...

copy-fail

Copy Fail PoC English Python PoC for CVE-2026-31431 , intended for controlled laboratory testing on authorized Linux systems. For use only in your own environments, labs, or systems where you have explicit permission. Do not run this code against third-party systems. Description copy-fail.py chec...

telnet-inetutils-auth-bypass-CVE-2026-24061

CVE-2026-24061: Omisión de Autenticación en GNU inetutils-telnetd Un laboratorio Docker para demostrar CVE-2026-24061 — una vulnerabilidad crítica de omisión de autenticación en GNU inetutils telnetd que permaneció sin parchear durante 11 años. La Vulnerabilidad Telnetd pasa la variable de entorn...

apache-cve-2021-41773-lab

Laboratorio de Path Traversal en Apache 2.4.49 — CVE-2021-41773 Clonar root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Uso Iniciar el servidor vulnerable: root@kitploit: ./apachelab.sh elige la opción 1 Explo...

social_mapper

Social Mapper 此工具已不再积极维护，部分功能可能仍可工作，我接受拉取请求以使其保持最新 警告：Facebook 现已能在几百次搜索后检测到此工具，请仅使用一次性 Facebook 账户 一款通过面部识别关联社交媒体个人资料的映射工具，由 Jacob Wilkin Greenwolf 开发。 Social Mapper 是一款开源情报工具，利用面部识别大规模关联不同平台上的社交媒体个人资料。它采用自动化方法，在流行的社交媒体网站上搜索目标姓名和图片，准确检测并分组一个人的存在，将结果输出为报告，供人工操作员快速审阅。 Social Mapper...

Binary-Exploitation-and-Kernel-Escalation

Binary-Exploitation-and-Kernel-Escalation Acceso a nivel root asegurado mediante la identificación y explotación de configuraciones incorrectas y software desactualizado. Vulnerabilidad de desbordamiento de búfer en una versión desactualizada de modssl CVE-2002-0082. La escalada de privilegios se...

cfengine-CVE_2015_0235

CVE20150235 Exploit de desbordamiento de búfer en gethostbyname de glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability Obtenido originalmente del mensaje de Ben Bomgardner a la lista de correo help-cfengine...

Exploit for Improper Input Validation in Unrealircd

CVE-2010-2075 — UnrealIRCd 3.2.8.1 Backdoor Exploit !Python...

Exploit for Code Injection in Apache Ofbiz

ofbiz-xmlrpc-rce CVE-2023-49070 PoC for the Apache OFBiz XM...

Dji_ble_vuln

CVE-2026-78306 — Inyección de comandos DUML en drones DJI a través de Bluetooth POC Registro CVE: https://vulners.com/cve/CVE-2026-78306 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78306 Descripción Los drones DJI exponen una interfaz Bluetooth utilizada para establecer una conexión con la...