bypass360mimikatz_x64

Method: Modify resources, add digital signature Extraction password: 6613kris清水川崎...

Dji_ble_vuln

CVE-2026-78306 — DJI Drone DUML Command Injection over Bluetooth POC CVE record: https://vulners.com/cve/CVE-2026-78306 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78306 Description DJI drones expose a Bluetooth interface used to establish a connection to the drone's Wi-Fi interface and exchan...

CVE-2025-31033

⚠️ CVE-2025-31033 - CSRF en el plugin Buddypress Humanity de WordPress Exploit – C...

CVE-2026-66246

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...

CVE-2025-56515

CVE-2025-56515 Vulnerabilidad de Cross-Site Scripting XSS en la aplicación de chat Fiora CVE-2025-56515: Vulnerabilidad de Cross-Site Scripting XSS en la aplicación de chat Fiora Resumen de la vulnerabilidad CVE ID : CVE-2025-56515 Tipo de vulnerabilidad : Cross-Site Scripting XSS Tipo de ataque ...

CVE-2026-66246

HCL iControl is affected by a Broken Access Control vulnerability. The issue stems from missing authentication checks or insecure direct object references (IDOR) , which could enable an attacker to perform privilege escalation and perform unauthorized modification or deletion of sensitive applica...

CVE-2026-66246 HCL iControl is affected by multiple security vulnerabilities

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...

EUVD-2026-90813

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acceso a través del archivo wfufiledownloader.php, WordPress File Upload Solution poc, se produce una vulnerabilidad en la solución, se puede acceder a archivos de forma arbitraria y manipularlos o modificarlos...

cve-2023-1874

CVE-2023-1874 Descargo de responsabilidad ESTE SCRIPT ESTÁ DISEÑADO SOLO PARA FINES EDUCATIVOS Y DE SOMBRERO BLANCO. CUALQUIER USO DE ESTO CONTRA UN DISPOSITIVO QUE NO ESTÉS AUTORIZADO A PROBAR O QUE NO POSEEAS ES TU PROPIA RESPONSABILIDAD. EL AUTOR DE ESTE SCRIPT NO SE HACE RESPONSABLE DE NADA D...

CVE-2019-6690-python-gnupg-vulnerability

CVE-2019-6690: Validación de entrada incorrecta en python-gnupg 0.4.3 Descubrimos una forma de inyectar datos a través de la propiedad passphrase de los métodos gnupg.GPG.encrypt y gnupg.GPG.decrypt cuando se utiliza cifrado simétrico. La passphrase suministrada no se valida para saltos de línea,...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-ataque-y-mecanismo-de-seguridad En este proyecto, descubrimos un ataque reciente a través de un contenedor malicioso e implementamos un mecanismo de seguridad para detenerlo. Introducción Los ciberataques se han convertido en un desafío crítico tanto para empresas como para pequeñas...

CVE-2023-36845

CVE-2023-36845 Exploit de modificación de variables externas de PHP en J-Web de Juniper JunOS CVE-2023-36845...

cve-2019-5736-poc

CVE-2019-5736 Prueba de Concepto Esto agrega una cadena al binario runc del host. Trae tu propio payload ver stage2.c. Para ejecutar: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

CVE-2026-103288

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorizatio...

Yellowkey-mitigation

Yellowkey-mitigation.ps1 es un script de PowerShell que automatiza el flujo de trabajo de mitigación de WinRE descrito en CVE-2026-45585, agrega verificación después de cada paso y no ejecuta el paso 6 reagentc /disable + reagentc /enable si algún paso anterior falla. También comprueba si el camb...

CVE-2024-3553

CVE-2024-3553 Tutor LMS = 2.6.2 - Autorización faltante para actualización limitada de opciones no autenticada El plugin Tutor LMS – eLearning and online course solution para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidades en la...

CVE-2026-103288

The open-source publishing platform Ghost contains an input validation flaw within its comment like feature in versions 5.9.0 before 6.44.1 . This vulnerability allows an authenticated member to bypass authorization controls to delete comment likes or dislikes belonging to other users. Successful...

EUVD-2026-90681

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorizatio...

CVE-2026-103288 Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Like

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorizatio...