security_articles

securityarticles- Vulnerabilidades en Balizas V16 Conectadas Artículo donde explico varias vulnerabilidades encontradas en la baliza v16 Help Flash IoT. Estas vulnerabilidades afectan a las comunicaciones de la baliza y a un mecanismo de actualización de software por WiFi. DIC-2025...

DVWA

翻译 翻译：@inVains @songzy12 @cnskis 关于 DAMN VULNERABLE WEB APPLICATION（DVWA） Damn Vulnerable Web Application DVWA译注：可以直译为："该死的"不安全Web应用程序，是一个编码差的、易受攻击的 PHP/MySQL Web应用程序。 它的主要目的是帮助信息安全专业人员在合法的环境中，练习技能和测试工具，帮助 Web 开发人员更好地了解如何加强 Web 应用程序的安全性，并帮助学生和教师在可控的教学环境中了解和学习 Web 安全技术。 DVWA的目的是通过简单明了的界面来练习一些最常见的...

advisories

advisories "Testing can prove the presence of bugs, but not their absence." -- Edsger W. Dijkstra Una colección de mis avisos de seguridad públicos. Ver también https://github.com/hnsecurity/vulns https://hnsecurity.it/blog/author/marco-ivaldi/ Avisos Linux CVE-2006-1242. Debilidad de divulgación...

nf-tables-lpe

nf-tables-lpe Exploits of Team Orca from Sea Security and Qrious Secure for multiple vulnerabilities in Netfilter's nftable module...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Investigación de Vulnerabilidades RAPTOR Loop-Hunt Una auditoría de seguridad de Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a realizada con la metodología RAPTOR loop-hunt : reconocimiento determinista → 25 agentes generadores aislados leyendo el código...

Foxit PDF Editor < 14.0.8 / 2026.2.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2026.2.1/14.0.8. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2018-16509

CVE-2018-16509 Ghostscript contiene múltiples vulnerabilidades de omisión del sandbox -dSAFER Ejecución root@kitploit: $ docker run -d --name cve-2018-16509 -p 9000:9000 cve-2018-16509...

CVE-2001-0932

CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 1 Publicación en Exploit-db en https://www.exploit-db.com/exploits/21162/ CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 2 Publicaci...

CVE-2018-7211-PoC

CVE-2018-7211-PoC El PoC||GTFO de CVE-2018-7211 Referencia: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ Requisitos Ninguno, solo Python Uso Ejecute el script root@kitploit: $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod ...

CVE-J2store-2026

J2Store / J2Commerce — CVE-2026-67358–67362 PoC Material de prueba de concepto para cuatro vulnerabilidades en comj2store J2Commerce J2Store, descubiertas por Murrez y corregidas en:...

CVE-2026-6205

creationtimestamp| type| source ---|---|--- 2026-09-21 12:45:04+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-synology-diskstation-manager-dsm- 2026-09-21 13:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvzshwm2f22i...

Security Bulletin: Multiple Vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance - Múltiples vulnerabilidades de validación de entrada Publicación de Exploit-db en https://www.exploit-db.com/exploits/30290/ Documento de Exploit-db en:...

GHSA-8MX4-8XFC-QR43 vulnerabilities

Vulnerabilities for packages: ffmpeg, eco-python-ffmpeg-minimal...

cisco-security-research

Investigación de Seguridad de Cisco Investigador: 0xReadingSteiner Contacto: [email protected] Proveedor: Cisco Systems, Inc. Proveedor notificado: 2026-08-04 Cisco PSIRT, ZDI, SSD Respuesta del proveedor: Ninguna Por qué existe esto La investigación de seguridad independiente sobre producto...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, druid, apache-pulsar, pinot, tez, pinot-fips...

GHSA-8WMF-6V46-5GFG vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, gitlab-kas, kube-state-metrics, opentofu, prometheus, secrets-store-csi-driver, restic, azure-service-operator, trivy-operator, metallb, cluster-api, gcsfuse, cloudflared, kubernetes-csi-external-resizer, traefik, hydra, containerd,...

Fedora 45 : thunderbird (2026-aa0e0deed1)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aa0e0deed1 advisory. Update to latest stable upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

nbox-pwnage

nbox-pwnage root@kitploit: Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. Create your own nbox appliance: vagrant up 2. SSH into the appliance with vagrant ssh 3. Check for some of the nbox...

USN-8761-2: Linux kernel (Azure FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...