CVE-2023-29386

CVE-2023-29386 — Manager for Icomoon Este README documenta una vulnerabilidad divulgada únicamente con fines educativos y defensivos.No ejecutes pruebas contra sistemas de producción o sistemas que no poseas o para los que no tengas permiso explícito de prueba. Descubierto por: deokhunKim Estado:...

CVE-2025-65345

CVE-2025-65345 – Recorrido de ruta autenticado desde la función Zip que lleva a la divulgación del sistema de archivos en laravel-file-manager v3.3.1 🧭 Resumen Una vulnerabilidad de Recorrido de Directorio autenticado en laravel-file-manager v3.3.1 y anteriores permite a atacantes con acceso a la...

EUVD-2026-90806

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...

CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...

CVE-2026-62063

The WpTravelly (tour-booking-manager) WordPress plugin by Magepeople inc. is vulnerable to a Broken Access Control issue in versions

CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...

Security Bulletin: Bouncy Castle(bcprov and bcpg) security vulnerability in IBM FileNet Content Manager(FNCM) reported for FileNet Deployment Manager(FDM)

Summary IBM FileNet Content ManagerFNCM 5.7.0-IF6 addresses multiple Bouncy Castle CVEs reported for FileNet Deployment ManagerFDM Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This iss...

lsPass

lsPass: gestor de contraseñas local y cifrado GTK4 / gtkmm-4 · C++23 · CMake · SQLite · libsodium lsPass guarda inicios de sesión, notas seguras y claves de API en un almacén cifrado local. Sin red, sin nube, sin telemetría. Nunca se escribe nada secreto en disco en texto plano. Compilar y probar...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

ivanti-automationmanager-exploit

PoC for CVE-2022-44569 for Ivanti Automation Manager, it took Ivanti more than a year to get a fix out. Ivanti told me it's fixed in Ivanti Automation 2023.4... https://github.com/rweijnen/ivanti-automationmanager-exploit/assets/7575747/818f11e1-0e86-4d91-8ce1-8949e45cfd8c...

CVE-2023-20110

CVE-2023-20110 PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability Usage 1. Update IP address and admin cookies in script, 2. Run the script with the following command: python3 exploit.py...

CVE-2025-63307

CVE-2025-63307 – Authenticated Stored Cross-site Scripting XSS in laravel-file-manager v3.3.1 🧭 Overview An authenticated Stored Cross-site Scripting XSS vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitra...

CVE-2024-46256

CVE-2024-46256 Nginx Proxy Manager RCE Vulnerability Analysis Environment Setup 1. Running Nginx Proxy Manager 2.11.3 Environment docker-compose up -d Or you can use the automated script: python setupenvironment.py 2. Accessing Nginx Proxy Manager URL: http://localhost:81 Complete the initial...

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities KEV, following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 CVSS...

[SECURITY] [DLA 4808-1] network-manager-l2tp security update

Debian LTS Advisory DLA-4808-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 01, 2026 https://wiki.debian.org/LTS Package : network-manager-l2tp Version : 1.20.8-1+deb12u1 CVE ID : CVE-2026-19624 CVE-2026-75131 CVE-2026-75883 CVE-2026-93337 Andres...

CVE-2026-64950

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...

CVE-2026-64949

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...

CVE-2026-64947

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64946

A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator account takeover. This issue affects Pandora FMS: from 777 onwards...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analyze, and report the breach using ELK...