LavaDome

LavaDome 🌋️ Una nueva herramienta deLavaMoat para el E ncapsulamiento seguro de nodos del DOM ⚠️ EXPERIMENTAL WIP - ÚSALO BAJO TU PROPIO RIESGO más información Demo PruebaLavaDome: visita la aplicación demo, abre la consola y haz todo lo que esté en tu poder para robar el secreto dentro de la...

langflow-cors-scanner

CVE-2025-34291 — Validación de origen / CORS de Langflow Descripción general La configuración de CORS demasiado permisiva combinada con la configuración de cookie de token de actualización permite el robo de credenciales. Campo| Valor ---|--- CVE| CVE-2025-34291 Gravedad| HIGH Producto| Langflow...

vulnreport

Proyecto Abandonado Este proyecto no recibe mantenimiento actualmente y ha sido abandonado. Vulnreport Plataforma de gestión y automatización de pentesting Vulnreport es una plataforma para gestionar pruebas de penetración y generar informes de hallazgos bien formateados y procesables sin la...

cloud-buster

Resolvedor de Cloudflare Una herramienta integral de pentest que verifica sitios habilitados con Cloudflare en busca de fugas de IP de origen. ¡Está llena de características increíbles! escanea una amplia gama de malas configuraciones y vulnerabilidades busca en bases de datos de otros servicios ...

the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss

CVE-2026-78997 — UC Browser for Android Universal XSS UXSS PoC material for CVE-2026-78997 — Universal Cross-Site Scripting in UC Browser for Android com.UCMobile.intl, version 13.7.8.1314, disclosed by Omri Inbar Novee. A reflected XSS on the bridge-whitelisted domain mtmsg.uc.cn grants access t...

Cloudmare

Cloudmare Cloudmare es una herramienta simple para encontrar los servidores de origen de sitios web protegidos por Cloudflare, Sucuri o Incapsula con un DNS mal configurado. Para más detalles sobre esta vulnerabilidad común y cómo funciona Cloudmare, envíame un mensaje privado. Así es como se ve...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

PT-2026-104117

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-93453

CVE-2026-93453 — SOGo Password Reset Link Poisoning via Origin Header An exploit for a flaw where SOGo assembles the password-reset link it emails to users straight from the client-supplied Origin header. An anonymous attacker who knows a victim's login POSTs a recovery request with a controlled...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Inyección de cabecera Host que conduce a la omisión de autenticación SAML en AWS Auth Manager de Apache Airflow Un atacante puede inyectar una cabecera Host maliciosa en el flujo de inicio de sesión SAML, haciendo que la URL del Servicio de Consumo de Aserciones ACS apunte a un...

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server WebSocket 任意文件读取批量检测 免责声明： 本工具仅用于授权的安全测试和教育研究。使用者应遵守当地法律法规，未经授权扫描或攻击他人系统属于违法行为。作者不对任何滥用行为承担责任。 漏洞描述 Vite 开发服务器（6.0.0 6.4.1, 7.0.0 7.3.1, 8.0.0 8.0.4）的 HMR WebSocket 未校验 Origin 头，攻击者可通过 vite:invoke 事件调用 fetchModule，使用 file:// 协议配合 ?raw 参数绕过 server.fs.allow...

CVE-2026-34200

Nhost MCP Server: One-Click Infrastructure Compromise Official Advisory: This vulnerability was acknowledged and published by Nhost: GHSA-6c5x-3h35-vvw2 This repository documents a vulnerability in the Nhost Local MCP Server. The service lacks inbound authentication and implements a permissive CO...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing – Technical Research & Proof-of-Concept Author: Sastra Adi Wiguna Purple Elite Teaming Research Date: January 2026 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8...

CVE-2026-27579-CollabPlatform-Appwrite-CORS-Misconfiguration

Appwrite CORS Misconfiguration Exploit PoC CVE-2026-27579 – Credentialed Account Data Leak via Permissive CORS CVE-2026-27579 GHSA-qh5m-p8jh-hx88 A severe CORS misconfiguration in the Appwrite backend used by the realtime-collaboration-platform allows an attacker-controlled origin to read sensiti...

CVE-2026-104059 Lektor 3.3.14 CSRF via Admin API Endpoints

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, CORS configuration, or Host...

CVE-2026-103922

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

EUVD-2026-90973

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922

The Capacitor cross-platform native runtime (versions 6.0.0 up to 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1) contains a navigation guard vulnerability on Android and iOS . The guard validates the host and scheme of a target URL but fails to validate the path , allowing an attacker to navigate a frame...

CVE-2026-12295-UXXS-in-my-wasm

CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefox UXSS Proof of concept: a compromised content process forges a PDocumentChannel load whose nsDocShellLoadState carries SrcdocData together with an arbitrary URI. Vulnerable builds serve the attacker HTML as the document at the victim...