CVE-2023-4863

CVE-2023-4863 checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build webp make -f...

CVE-2026-10818

CVE-2026-10818 WPForms Pro = 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering CVE-2026-10818 WPForms Pro ≤ 1.10.1.1 — Unauthenticated Arbitrary File Write via Chunked Upload Proof-of-Concept Exploit Chunked Upload Init/Finalize Ordering → Predictable Path...

AsmResolver

AsmResolver AsmResolver es una biblioteca para leer, modificar y reconstruir archivos Portable Executable PE. Admite imágenes PE que se ejecutan de forma nativa en Windows, así como imágenes que contienen metadatos administrados .NET. AsmResolver se publica bajo la licencia MIT. Características...

CVE-2023-4220-Chamilo-LMS

Chamilo LMS Vulnerabilidad RCE por Carga Masiva No Autenticada PoC Este script permite la explotación de la falla de seguridad del software Chamilo LMS descrita en CVE-2023-4220. El sistema es vulnerable en versiones anteriores a 1.11.24. Uso Clona el repositorio en tu máquina e instala las...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

Malicious-MCP

MCP Malicioso Este es un proyecto de prueba de concepto que te permite desplegar un servidor MCP que se "disfraza" como cualquier otro servidor MCP. Este MCP actúa como un 'Proxy' de MCP, y simplemente reenvía todas las solicitudes entrantes a un servidor MCP upstream. ¿Qué es un MCP? Un Servidor...

CVE-2026-92713

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

CVE-2026-13456

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...

CVE-2026-3576

CVE-2026-3576 - Plugin de WordPress Planyo Online Reservation System -f --disable-check python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd...

CVE-2026-31431-Linux-Copy-Fail

🛡️ CVE-2026-31431-Linux-Copy-Fail - Ejecuta Shellcode Personalizado con Facilidad 📌 Resumen del Proyecto Este software proporciona una herramienta para probar la vulnerabilidad CVE-2026-31431 de Linux. Utiliza el lenguaje de programación Rust para interactuar con archivos del sistema. El programa...

CVE-2026-93353

A flaw was found in copyparty. The Secure File Transfer Protocol SFTP service fails to enforce access restrictions during directory creation, removal, and file attribute modification operations. An authenticated remote attacker can exploit this issue by traversing symbolic links that lead outside...

JarHunter

JarHunter – Herramienta Avanzada de Análisis y Extracción de JAR JarHunter es una herramienta diseñada para explorar, buscar y extraer clases específicas de archivos JAR grandes de forma rápida y eficiente. En lugar de navegar manualmente a través de miles de clases, JarHunter permite buscar...

CVE-2026-37067

CVE-2026-37067 Control de acceso incorrecto en /vfm-admin/admin-panel/view/save-cvs.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado extraer todos los registros de la aplicación a partir de una fecha deseada mediante una solicitud POST especialmente diseñada...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: Servicio HTTP sin autenticación de ES File Explorer Un harness de investigación y análisis técnico implementado de forma independiente, consciente de la seguridad, para CVE-2019-6447 , un servicio HTTP sin autenticación expuesto por versiones vulnerables de ES File Explorer para...

Grafana-Plugin-Enumerator-CVE-2021-43798

Grafana CVE-2021-43798 Plugin Enumerator A small Bash-based tool for testing Grafana instances for CVE-2021-43798 , a directory traversal vulnerability affecting vulnerable Grafana versions. The tool enumerates Grafana plugin IDs and uses curl --path-as-is to test whether directory traversal can...

CVE-2026-17602

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to a Directory Traversal (Path Traversal) vulnerability in all versions up to and including 4.7.42 . The root cause is a flaw in handling the 'file_name' parameter. This allows authenticated attackers wit...

CVE-2026-17602 SSL Zen <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_name' Parameter

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, t...

EUVD-2026-86599

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, t...

EUVD-2026-86595

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...