136219 matches found
EUVD-2026-78277
moment vulnerable to Path Traversal via crafted non-string locale name...
cve-2021-42013-docker-lab
CVE-2021-42013 Introducción Se descubrió que la corrección para CVE-2021-41773 en Apache HTTP Server 2.4.50 era insuficiente. Un atacante podría utilizar un ataque de path traversal para asignar URLs a archivos fuera de los directorios configurados mediante directivas similares a Alias. Si los...
EUVD-2026-64850
webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath...
aapanel-ws-bypass
aaPanel: Los proveedores no siempre corrigen las cosas correctamente Una corrección incompleta para CVE-2021-37840 sigue exponiendo 3,6 millones de servidores a RCE como root, 5 años después Descubierto por: EON Security CVE: Pendiente de asignación CVSS: 8.8 Alta —...
CVE-2025-1302
CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Lab Setup docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000 Description Versions of the package...
BPFDoor-controller-source
BPFDoor-controller-source Source code to recent BPFDoor's controller variant Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py Compile: $ apt install libssl-dev $ gcc -Wno-implicit-function-declaration...
CVE-2021-4034
CVE-2021-4034 PoC para PwnKit: Vulnerabilidad de escalada local de privilegios en pkexec de polkit en Python Uso git clone https://github.com/rvizx/CVE-2021-4034 cd CVE-2021-4034 python3 cve-2021-4034-poc.py Notas C : https://github.com/arthepsy/CVE-2021-4034 Solución sudo chmod 0755 /bin/pkexec...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: chunkah: chunkah-0.7.0-1.1.hum1 aarch64, x8664 chunkah-0.7.0-1.1.hum1.src src...
tomcat-line-check
tomcat-line-check CVE-2026-24880 · GHSA-563x-q5rq-57qp —— Apache 那句 upgrade to version 11.0.20, 10.1.52 or 9.0.116 对你成不成立? 对多数人不成立,而且有四种不同的不成立方式。这个工具扫你的构件,告诉你是哪一种。 java -jar tomcat-line-check.jar /path/to/tomcat 解压部署的 Tomcat java -jar tomcat-line-check.jar app.war war java -jar...
cve-2021-33909
Kernel runtime fix of CVE-2021-33909 This repository builds an out-of-tree module named "cve-2021-33909.ko". cve-2021-33909 fixes an issue in the kernels filesystem layer by kprobe-replacing vulnerable functions during runtime. It can be build via "make", setting KDIR to the kernels...
CVE-2020-0041
CVE-2020-0041 Este repositorio contiene el código para explotar CVE-2020-0041, un fallo que reportamos a Google en diciembre de 2019 y que fue corregido en el Boletín de Seguridad de Android de marzo de 2020. Puedes encontrar el exploit de escape del sandbox en sandbox/. El análisis del fallo y e...
OpenTAXII
OpenTAXII Implementación del servidor TAXII en Python de EclecticIQ. OpenTAXII es una implementación robusta en Python de los Servicios TAXII que ofrece un amplio conjunto de funciones y una API pitónica y amigable construida sobre una aplicación bien diseñada. Se garantiza que OpenTAXII es...
sift-hardened
sift-hardened Reemplazo directo de sift 17.1.3 que corrige CVE-2026-85625. No está afiliado con crcn/sift.js. Cambios respecto a 17.1.3 Las claves de consulta se enumeran con Object.keys solo propiedades propias, por lo que un Object.prototype.$where contaminado no se trata como un operador. Los...
harbian-audit
harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...
redamon
Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...
ROOT-OS-ALPINE-317-CVE-2026-28389 CVE-2026-28389 in openssl - Patched by Root
Root has patched CVE-2026-28389 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45732 CVE-2026-45732 in n8n - Patched by Root
Root has patched CVE-2026-45732 in the n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-HV7X-3X78-GX53 GHSA-hv7x-3x78-gx53 in n8n - Patched by Root
Root has patched GHSA-hv7x-3x78-gx53 in the n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-14813 CVE-2025-14813 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2025-14813 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...