143583 matches found
cve-2021-41773
CVE-2021-41773 – Apache Path Traversal Report Summary Vulnerability found in Apache HTTP Server 2.4.49 that can expose sensitive files on the system through a Path Traversal attack depending on the web server configuration Path Traversal: An attacker can access files outside the web root using...
wp-ulike-cve-2025-32259-poc
WP ULike ≤ 4.7.9.1 - Suplantación de Contenido sin Autenticación CVE-2025-32259 🔬 Un PoC simple que demuestra CVE-2025-32259 en el plugin WP ULike para WordPress. 🚨 Solo uso educativo – no probar en sistemas sin autorización explícita. 🧠 Resumen WP ULike es un popular plugin de WordPress que...
Security Bulletin: IBM Security SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-41254, CVE-2026-47057)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM Security SOAR has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an...
ssh-enum
ssh-enum Statistical Validation Study of CVE-2016-6210 A reproducible re-investigation of OpenSSH username enumeration using statistical analysis. This project re-investigates CVE-2016-6210 , a documented OpenSSH timing side-channel, to determine whether it remains observable on a modern Ubuntu...
CVE-2025-24813-noPoC
CVE-2025-24813-noPoC Después de incontables horas no pude encontrar ningún PoC real. Si bien la deserialización de archivos subidos podría representar una amenaza, todas las cadenas de payload que probé fallaron. Probado en las versiones 9.0.90 y 10.1.15 de Apache Tomcat ¡No hay nada más que ver...
mcp-server-attestation
Parte delStudioMeyer MCP Stack — Hecho en Mallorca 🌴 · ⭐ si lo usas mcp-server-attestation Endurecimiento de la cadena de suministro de capa 2 para servidores del Model Context Protocol. Manifiestos de herramientas firmados con Ed25519, atestación de spawn en tiempo de ejecución, saneador de...
CVE-2022-26923
CVE-2022-26923 विवरण यह भेद्यता एक निम्न-विशेषाधिकार प्राप्त उपयोगकर्ता को Active Directory Certificate Services AD CS सर्वर भूमिका स्थापित डिफ़ॉल्ट Active Directory वातावरण में डोमेन व्यवस्थापक तक विशेषाधिकार बढ़ाने की अनुमति देती है। यह मुख्य रूप से Active Directory Certificate Services AD CS...
userenum-CVE-2018-15473
Userenum CVE-2018-15473 User enumeration for CVE-2018-15473 This script is a method to use a user dictionary with the CVE-2018-15473 SSH User Enumeration by Leap Security @LeapSecurity https://leapsecurity.io. Script developed to solve Valentine HTB machine. How to use it 1st. Download the main...
CVE-2023-33768
CVE-2023-33768 Description Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service DoS via a crafted firmware file. Additional Information When updating the firmware of the Wemo...
ingressNightmare-CVE-2025-1974-exps
Pesadilla de Ingress CVE-2025-1907 Descripción Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de kubernetes/ingress-nginx. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe en el manejo de solicitudes...
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
CVE-2026-59889
A flaw was found in jackson-databind. The UnwrappedPropertyHandler.processUnwrapped method, responsible for handling @JsonUnwrapped properties, replays buffered JSON without properly checking the active view. This allows an attacker to write data to a property annotated with both @JsonView and...
kit-oauth
kit-oauth OAuth 2.0 client library for Kit applications TOC Files File| Description ---|--- .editorconfig| Editor formatting configuration .gitignore| Git ignore rules for build artifacts and dependencies .tool-versions| asdf tool versions Zig, Kit LICENSE| MIT license file README.md| This file...
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method is rewritten to an arbitrary attacker-supplied value before routing. This allows bypassing method-based access controls enforced by upstream proxies or WAFs.
...
Ivanti Connect Secure - Stack-based Buffer Overflow
Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...
Atlassian Jira Limited - Local File Inclusion
Affected versions of Atlassian Jira Limited Server and Data Center are vulnerable to local file inclusion because they allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. id: CVE-2021-26086 info: name: Atlassian Jira Limited - Local...
CVE-2026-6018-9-Local-Privilege-Escalation-Chain
CVE-2025-6018 + CVE-2025-6019: Local Privilege Escalation Chain Target OS: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x Required access: Unprivileged local user with SSH access Result: Full root shell Overview This document details the manual exploitation of two chained local privilege...
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice DoJ on Tuesday announced the takedown of a long-standing peer-to-peer P2P botnet known as Sality as part of a coordinated law enforcement operation. The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, and Romania, in...
