W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure

The W3 Total Cache WordPress plugin through version 2.9.3 skips its entire output buffering and processing pipeline whenever an incoming request's User-Agent header contains the string "W3 Total Cache", without authenticating the caller. On sites that use developer-placed dynamic fragment tags, t...

Solara <1.35.1 - Local File Inclusion

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

Broken-Vulnerable-Code-Snippets

Vulnerable-Code-Snippets Una colección de fragmentos de código vulnerables tomados de Internet. Fragmentos extraídos de varios blogs, libros, recursos, etc. Sin intención de infringir derechos de autor. Nota: Esto no es un buen benchmark para probar herramientas de análisis estático; son fragment...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: veth: Fixed the issue where the skb length was accounted for after XDP fragment adjustment. The veth vulnerability involves the exposure of non-linear skb fragments through an xdpbuff. When an XDP program adjusts the fragment...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Prueba de Concepto de Escalada de Privilegios Local de Dirty Frag ⚡ 📖 Descripción Este repositorio contiene una Prueba de Concepto PoC para: CVE-2026-43284 — Dirty Frag El exploit demuestra una vulnerabilidad que afecta a sistemas Linux vulnerables. 🧠 Acerca de...

CVE-2026-79752

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-79752 CVE-2026-79752 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-79752-Abraxas-Labs.py. CAST AS literal. FunctionsBuilder::cast and extract / datePart / dateAdd splices...

PoC-Exploit-CVE-2024-20467

Exploit para la vulnerabilidad en Cisco IOS XE CVE-2024-20467 Descripción general Este exploit se dirige a una vulnerabilidad en el código de ensamblaje de fragmentos IPv4 presente en Cisco IOS XE Software. La vulnerabilidad permite a un atacante remoto no autenticado provocar una condición de...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — 研究笔记 概述 该仓库包含一个经过清理的技术示意图和辅助笔记，用于描述通常被称为 Dirty Frag 且针对 xfrm-ESP 路径被追踪为 CVE-2026-43284 的 Linux 内核漏洞。 该问题属于由 Hyunwoo Kim（@v4bel）发现的更广泛的 Dirty Frag 类别。一个相关的 RxRPC 变体被单独追踪为 CVE-2026-43500 。 本材料的目的是： 在系统层面解释漏洞机制； 记录 XFRM ESP、UDP 封装、splice、skb 片段、文件支持页以及页缓存损坏之间的关系；...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1786714360)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786714360 advisory. - A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a...

Rocky Linux 8 [CIQ] Security Update: haproxy / haproxy-debuginfo / haproxy-debugsource (crlsa-2024_8849)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248849 advisory. haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers CVE-2023-45539 Tenable has extracted the preceding description block...

AlmaLinux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.6:CLSA-2026:1786699059)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786699059 advisory. - A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a...

Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.6:CLSA-2026:1786699059)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786699059 advisory. - A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a...

PT-2026-98715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bcmasp xmit function where the txcb-last field was only set to true for the final fragment of an SKB Socket Buffer, leaving non-final fragments untouched. If a...

Unbounded Memory Consumption

Http4s is vulnerable to unbounded memory consumption. The vulnerability is due to HTTP/2 header blocks and CONTINUATION fragments being buffered without a size limit, which allows a remote attacker to keep an incomplete header block open and exhaust heap memory, potentially causing denial of...

PT-2026-96076

Name of the Vulnerable Software and Affected Versions github.com/temporalio/tchannel-go affected versions not specified Description The software fails to reject TChannel call fragments that contain checksum metadata but lack length-prefixed argument chunks. In this scenario, the fragment reader...

CVE-2026-59902

A flaw was found in Netty. The SctpMessageCompletionHandler component, which handles Stream Control Transmission Protocol SCTP messages, limits incomplete messages and fragment counts but does not properly limit maxBufferedBytes. An unauthenticated remote attacker could send specially crafted,...

CVE-2026-47890

A flaw was found in Spring Framework, affecting its MVC and WebFlux applications. When these applications use Server-Sent Events SSE with view fragments, a vulnerability allows for stream corruption. This can lead to unreliable data delivery and potential disruption of services. Mitigation Disabl...

CVE-2026-79752

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752

CakePHP , a rapid development framework for PHP, is affected by an SQL injection vulnerability in src/Database/FunctionsBuilder.php. The methods FunctionsBuilder::cast , ::extract , ::datePart , and ::dateAdd accept user-controlled dataType, part, or unit values and incorporate them into generate...

CVE-2026-79752 CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...