Laravel-Security

Laravel Security Laravel Security fue creado y es mantenido por Graham Campbell, y es un envoltorio de voku/anti-xss para Laravel, que utiliza graham-campbell/security-core. No dudes en consultar el registro de cambios, las versiones, la política de seguridad, la licencia, el código de conducta y...

suhosin

Suhosin Suhosin pronunciado 'su-ho-shin' es un sistema de protección avanzado para instalaciones de PHP. Fue diseñado para proteger servidores y usuarios de fallos conocidos y desconocidos en las aplicaciones PHP y en el núcleo de PHP...

EUVD-2026-77239

Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...

CVE-2025-29927

CVE-2025-29927 - Demo para Introducción a la Programación Segura 00960267 Antecedentes Este es un demo de CVE-2025-29927, una vulnerabilidad crítica en Next.js que permitía eludir el middleware con una cabecera determinada. La cabecera x-middleware-subrequest estaba diseñada para evitar bucles...

CVE-2025-14340

XSS para la toma de control de la cuenta de administrador CVE-2025-14340 Una vulnerabilidad de Cross-Site Scripting en la interfaz REST de administración de Payara permite la ejecución de JavaScript controlado por el atacante, lo que provoca la toma de control de la cuenta de administrador. Esto ...

K000163315: Linux kernel vulnerabilities CVE-2026-63884, CVE-2026-64219, CVE-2026-64496

Security Advisory Description CVE-2026-63884 In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo-ttm object might be changed by calling ttmbovalidate, move casting it to an i915tt object later to actually get the right...

enhanced-iframe-protection

Protección Mejorada de iFrame - Extensión de Navegador La Protección Mejorada de iFrame EIP es una extensión ligera que detecta automáticamente y proporciona advertencias detalladas para elementos iframe incrustados, con el fin de proteger contra ataques de Navegador-Dentro-Del-Navegador BITB...

About the security content of macOS Golden Gate 27

About the security content of macOS Golden Gate 27 This document describes the security content of macOS Golden Gate 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Tahoe 26.7

About the security content of macOS Tahoe 26.7 This document describes the security content of macOS Tahoe 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of watchOS 27

About the security content of watchOS 27 This document describes the security content of watchOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2026-89532

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upper bound as &chunk-chsegmentschsegcount - 1. chsegcount is u32, so th...

CVE-2026-89708

In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpctask that dereferences...

UBUNTU-CVE-2026-89532

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upper bound as &chunk-chsegmentschsegcount - 1. chsegcount is u32, so th...

CVE-2026-90616

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories e.g., /var/cache, /var/dat...

About the security content of macOS Sequoia 15.8

About the security content of macOS Sequoia 15.8 This document describes the security content of macOS Sequoia 15.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

UBUNTU-CVE-2026-89709

In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvcops dispatch nlmsvcops is published by nfsdlockdinit and cleared by nfsdlockdshutdown with plain stores, while lockd dereferences it unguarded from dispatch sites in fs/lockd/svcsubs.c. The pointer...

cve-writeups-and-pocs

CVE-2026-80724 PoC y Write-up CVE-2026-80724 — Kernel de Linux ptp: vmclock: evitar que los mapeos de solo lectura se vuelvan escribibles Prueba de concepto completa + Write-up técnico Investigación de seguridad por Abdifatah Suruur suruur — colección de write-ups de CVE y PoCs para...

askWAM

askWAM askWAM solicita tokens de acceso de Microsoft Entra de forma silenciosa a través del Administrador de cuentas web de Windows WAM. Se distribuye como un cliente de .NET Framework, un cliente nativo x64 independiente y un Beacon Object File x64 con un adaptador de comandos CNA. Todos los...

WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection

WordPress Secure Copy Content Protection and Content Locking plugin before 2.8.2 contains a SQL injection vulnerability. The plugin does not escape the sccpid parameter of the ayssccpresultsexportfile AJAX action, available to both unauthenticated and authenticated users, before using it in a SQL...

flash-exploit-defense-system

flash-exploit-defense-system Sistema de defensa integral multicapa contra exploits CVE de Adobe Flash CVE-2012-0754, CVE-2015-xxxx, CVE-2016-xxxx, CVE-2018-xxxx con protección a nivel de navegador, móvil, servidor y sistema...