chanleakcheck

chanleakcheck Esta es una herramienta para comprobar si tu nodo lnd fue objetivo de CVE-2019-12999, cuya divulgación completa ocurrió recientemente. La herramienta comprobará si tu nodo aceptó un canal inválido, así como intentará cuantificar la cantidad total de monedas perdidas, si las hay. Ten...

CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE Exploit ⚠️ AVISO LEGAL Esta herramienta es SOLO para pruebas de seguridad autorizadas y fines educativos. El uso no autorizado es ilegal. Los usuarios asumen toda responsabilidad por sus acciones. 📋 Resumen Este repositorio contiene una prueba de concepto del...

EUVD-2026-92873

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-La-falla-TCP-IP-que-abre-las-puertas Una vulnerabilidad crítica de RCE en la pila TCP/IP de Windows CVE-2025-26686 deja memoria sensible desbloqueada, permitiendo a atacantes remotos secuestrar sistemas. Explotable a través de la red, corre el riesgo de un compromiso total. Parchee...

CVE-2026-105762

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...

CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-105743

A flaw was found in docling. A remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by providing crafted URLs when remote resource fetching is enabled. Incomplete validation allows requests to be resolved again by the network client, enabling techniques such as Domain Name...

ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-87890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allo...

CVE-2025-71383

The Dbit WIFI4 N300 1.0.0 devices are susceptible to a crash of the management interface . The vulnerability is triggered by a request from the local Wi-Fi network that lacks a username or password field for the /api/login endpoint. This issue stems from an error within a JSON parser . No specifi...

Linux Distros Unpatched Vulnerability : CVE-2026-98330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211pernetexit moves any wiphy back to the initial...

Rocky Linux 10.1 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_1334)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261334 advisory. glibc: Integer overflow in memalign leads to heap corruption CVE-2026-0861 glibc: glibc: Information disclosure via zero-valued network query...

EUVD-2025-211036

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...

CVE-2026-93319

A malicious external BuildKit frontend can send requests using the int...

Linux Distros Unpatched Vulnerability : CVE-2026-104712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal...

PT-2026-106734

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who can supply bytes values to cause the Django process to make network requests via a crafted VRT document referencing an...

CVE-2024-24919

CVE-2024-24919 Script de explotación para CVE-2024-24919. Shodan: "Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" FOFA: title="Check Point SSL Network Extender" No me hago responsable de ningún uso indebido o daño causado por este script...

CVE-2026-82989

ViewSonic ViewBoard smartboards, which run on an Android-based system, are vulnerable to an input injection flaw in the vCast software suite. The vulnerability exists in exposed network services, allowing a remote, unauthenticated attacker to inject arbitrary input into service endpoints via HTTP...

CVE-2026-50751

CVE-2026-50751 Escáner IKEv1 de Check Point Un escáner de vulnerabilidades multihilo para CVE-2026-50751 , una vulnerabilidad crítica de omisión de autenticación IKEv1 que afecta a los Check Point Quantum Security Gateways. Resumen Los sistemas VPN de acceso remoto de Check Point con IKEv1...

CVE-2026-55726

CVE-2026-55726: Contenedor de Azure Blob Storage Listable Públicamente registros de dispositivos Aviso Campo| Valor ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 Medio Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Vector 4.0|...