Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC para CVE-2023-20198 Información de vulnerabilidad y uso del exploit proporcionados por smokeinthellos Ver referencias La gestión del endpoint, tipo de contenido http y encabezados ha sido modificada a partir de otros PoCs existentes para funcionar en...

DEBIAN-CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2022-27925

CVE-2022-27925 Descripción El 10 de mayo de 2022, Zimbra publicó las versiones 9.0.0 patch 24 y 8.8.15 patch 31 para abordar múltiples vulnerabilidades en Zimbra Collaboration Suite, incluyendo CVE-2022-27924 sobre la que escribimos anteriormente y CVE-2022-27925. Originalmente, Zimbra denominó a...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit Herramienta avanzada de explotación de path traversal en WinRAR Una sofisticada herramienta GUI para crear archivos RAR maliciosos que explotan la vulnerabilidad de path traversal en WinRAR CVE-2025-8088 mediante manipulación de ADS y cabeceras RAR5. Características...

CVE-2018-11235

CVE-2018-11235 的 PoC 漏洞利用 GitHub 不允许我推送利用此漏洞的仓库（这对他们来说是好的），因此你需要通过运行 build.sh 脚本来自行构建。 然后，将仓库推送到某处。当你使用 --recurse-submodules 标志克隆它时，evil 脚本 将被执行： $ git clone --recurse-submodules repo destdir Cloning into 'destdir'... done. Submodule 'Spoon-Knife' https://github.com/octocat/Spoon-Knife registered...

CVE-2018-12596

CVE-2018-12596 Ektron CMS 9.20 SP2 允许远程攻击者通过 "activateuser.aspx" 页面调用 aspx 页面，即使该页面位于 /WorkArea/ 路径下（通常仅限本地管理员访问）。 Exploit-DB 发布地址：https://www.exploit-db.com/exploits/45577/ PacketStorm 发布地址：https://packetstormsecurity.com/files/149734/Ektron-CMS-9.20-SP2-Improper-Access-Restrictions.html 时间线...

Astra Linux - Vulnerability in Golang-1.19

There is a path traversal vulnerability in the filepath.Clean function on Windows. On Windows, the filepath.Clean function could transform an invalid path such as “a/../c:/b” into the valid path “c:\b”. This transformation of a relative if invalid path into an absolute path could enable a directo...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NTB: Fixed a possible name leak in ntbregisterdevice. If deviceregister fails in ntbregisterdevice, the device name allocated by devsetname should be freed. According to the comment in deviceregister, callers should use putdevice...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - net: genl: fixed a memory leak in the error path during policy dumping. - If the construction of the policy array fails when recording non-first policies, we need to unwind the process. - The netlinkpolicydumpaddpolicy...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211: mesh: Fixed a leak of meshpreqqueue objects The hwmp code uses objects of type meshpreqqueue, which are added to a list in ieee80211ifmesh to track mpath. We need to fix this issue. If the mpath is deleted, the ex...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fixed an invalid unregistererrorpath path. The error path of seg6init is incorrect when the CONFIGIPV6SEG6LWTUNNEL configuration option is not defined. In such cases, if seg6hmacinit fails, the genlunregisterfamily...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Staging: fbtft: fixed a potential memory leak in fbtftframebufferalloc. In the error paths after the fbinfo structure is successfully allocated, the memory allocated in fbdeferredioinit for info-pagerefs is not freed. This issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: fixed to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 -...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: initramfs: Avoid filename buffer overflow The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as follows: plaintext 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 +...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: restore set elements when delete set fails From the abort path, nftmapelemactivate needs to restore refcounters to their original state. Currently, it uses set-ops-walk to iterate over these set elements. The...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hexadecimal numbers or similar elements. However,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: The issue of reference count leak for PCI devices was fixed in dmardevscopeinit. The function foreachpcidev is implemented through pcigetdevice. The comment accompanying pcigetdevice states that it will increase the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm: ESP: restoring the combined single-frag-length gate. The ESP out-of-place fast path appends the trailer in espoutputhead, before espoutputtail allocates the destination page frag. Currently, the head-side gate checks...

Explotacion-CVE-2023-32315-Openfire

🔍 CVE-2023-32315 Descripción: La vulnerabilidad CVE-2023-32315 afecta a servidores Openfire, permitiendo a un atacante bypassear el login del panel administrativo web sin credenciales válidas. El exploit agrega un usuario administrativo, permitiendo al atacante cargar un plugin malicioso y obtene...

CVE-2026-5027

Esta publicación es un artículo de investigación publicado por EQSTLab. Gracias aYahia Hamza, quien reportó y analizó esta vulnerabilidad. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Escritura Arbitraria de Archivos PoC ★ Descripción CVE-2026-5027 : Vulnerabilidad de Escritura...