CVE-2026-66069

A flaw was found in RabbitMQ. A user with a monitoring tag, when the Management plugin is enabled, can reset the per-node authentication-attempt counters. This action, which should be restricted to administrators, allows the monitoring-tagged user to erase evidence of brute-force login attempts...

MFASweep

MFASweep MFASweep es un script de PowerShell que intenta iniciar sesión en varios servicios de Microsoft utilizando un conjunto de credenciales proporcionado e intentará identificar si MFA está habilitado. Dependiendo de cómo estén configuradas las políticas de acceso condicional y otras...

CVE-2024-29943

CVE-2024-29943 Un bug de JIT de SpiderMonkey de Pwn2Own: Desde inconsistencia en el rango de enteros hasta eliminación de comprobación de límites y luego RCE. Este repositorio contiene PoC, Exploit y Diapositivas de Análisis para CVE-2024-29943. Demo Demo.mp4 Diapositivas Slides.pdf Información...

CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

CVE-2026-87022

Apache Tomcat is vulnerable to WebSocket message smuggling due to an improper handling of length parameter inconsistency when the per-message-deflate feature is enabled. This vulnerability affects versions 11.0.0-M1 through 11.0.25 , 10.1.0-M1 through 10.1.59 , and 9.0.0.M1 through 9.0.121 . Addi...

CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

EUVD-2026-85236

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Pocno se puede usar Todos los recursos provienen de este artículo https://bbs.kanxue.com/thread-268506.htm La causa principal de esta vulnerabilidad es la inconsistencia de lectura/escritura del objeto Parcel, que se remonta al siguiente código root@kitploit: public...

CVE-2025-43300

📚 CVE-2025-43300 - Análisis Detallado de la Vulnerabilidad 🎯 Resumen La CVE-2025-43300 es una vulnerabilidad de desbordamiento de búfer en el procesamiento de archivos DNG Digital Negative que ocurre debido a una inconsistencia entre los metadatos TIFF y los datos JPEG , permitiendo la ejecución...

CVE-2024-29943

CVE-2024-29943 一个 Pwn2Own SpiderMonkey JIT 漏洞：从整数范围不一致到边界检查消除再到 RCE。 基于 https://github.com/bjrjk/CVE-2024-29943 在 Windows 上复现 CVE-2024-29943 修改说明 原漏洞利用代码是针对 Linux 编写的，因此我尝试在 Windows 上复现： 更新了 Windows 下的弹出计算器的 shellcode，并调整了一些堆风水参数。（我尚未完全理解 Windows 堆的工作原理，因此只是调整了一些数值直到稳定。） 使用 Uint8Array 代替 Array...

EUVD-2023-60692

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 201...

CVE-2023-5778 Missing Length Check

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 201...

Linux Distros Unpatched Vulnerability : CVE-2026-90096

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after OAPPEND direct write fusedirectwriteiter captures...

CVE-2026-90096

In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after OAPPEND direct write fusedirectwriteiter captures pos before genericwritechecks, which moves kipos to EOF for OAPPEND writes: fusedirectwriteiter pos = iocb-kipos; / 0 user-supplied /...

CVE-2026-90096 fuse: invalidate the correct range after O_APPEND direct write

In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after OAPPEND direct write fusedirectwriteiter captures pos before genericwritechecks, which moves kipos to EOF for OAPPEND writes: fusedirectwriteiter pos = iocb-kipos; / 0 user-supplied /...

CVE-2026-90096 fuse: invalidate the correct range after O_APPEND direct write

In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after OAPPEND direct write fusedirectwriteiter captures pos before genericwritechecks, which moves kipos to EOF for OAPPEND writes: fusedirectwriteiter pos = iocb-kipos; / 0 user-supplied /...

CVE-2026-90096

CVE-2026-90096 affects the Linux kernel FUSE subsystem. In fuse_direct_write_iter(), the variable pos is captured before generic_write_checks(), which moves ki_pos to EOF for O_APPEND direct writes. The post-write page invalidation then targets a stale range [0, res) instead of the actual written...

EUVD-2026-81957

In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after OAPPEND direct write fusedirectwriteiter captures pos before genericwritechecks, which moves kipos to EOF for OAPPEND writes: fusedirectwriteiter pos = iocb-kipos; / 0 user-supplied /...

CVE-2026-89979 ALSA: pcm: Fix race between non-atomic ops and trigger-start

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the concurrent state transitions between atomic PCM ops, but the checks between the non-atomic ops hwparams, hwfree and prepare and the atomic o...

CVE-2026-89979 ALSA: pcm: Fix race between non-atomic ops and trigger-start

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the concurrent state transitions between atomic PCM ops, but the checks between the non-atomic ops hwparams, hwfree and prepare and the atomic o...