hacker-roadmap

This repository is an overview of what you need to learn penetration testing and a collection of hacking tools, resources and references to practice ethical hacking. Most of the tools are UNIX compatible, free and open source. Status This project has been terminated and archived. Content might be...

CVE-2026-106603 WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

CVE-2026-107582

Inefficient algorithmic complexity in the REST API 6.3.3 through 6.3.5 and the IMAP PREVIEW response 6.2.22 through 6.3.5 of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. To...

Backstage has potential file exposure through local TechDocs publisher

Impact When using the local TechDocs publisher techdocs.publisher.type: 'local', it was possible for the documentation serving endpoint to follow filesystem references outside the intended documentation tree, potentially exposing host files to authenticated users. This is mitigated by the fact th...

CVE-2026-105748

A flaw was found in Docling. This vulnerability allows an attacker to cause an information disclosure by providing a crafted document containing image references that point to local file paths or URIs Uniform Resource Identifiers. When the application processes and exports the document with...

CVE-2026-90236

A flaw was found in the Network File System Daemon NFSD of the Linux kernel. This vulnerability occurs due to an improper handling of export references when reaping open state IDs. An unreleased reference can pin an export, preventing the file system from being unmounted. This could allow a local...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net: gro subsystem, do not merge the zcopy state when copying fragments between the source skb and the GRO skb. The skbgroreceive function currently copies fragments between the source skb and the GRO skb, without checking...

CVE-2026-103078 WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...

CVE-2026-91777

A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing o...

The vulnerability of the UpdateIssueAttachments() function in the models/issues/issue_update.go file and the UpdateCommentAttachments() function in the models/issues/comment.go files of the Git repository management system Gitea allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the UpdateIssueAttachments function in the models/issues/issueupdate.go file and the UpdateCommentAttachments function in the models/issues/comment.go files of the Git repository management system Gitea is related to the use of names with incorrect references. Exploiting this...

SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block

Summary /api/block/getRefIDs filters its results for reader roles through a helper that checks only the visibility tiers. The password tier is not checked, because the helper does not receive the request context and therefore cannot evaluate the publish auth cookie. A reader who has not entered a...

Denial Of Service

Apache Neethi is vulnerable to Denial of Service. The vulnerability is due to remote policy references being manually retrieved via the API without size limits, where the library reads data from remote policy references without imposing a maximum size and an attacker can supply a huge policy...

PT-2026-103560

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description An XML parser fails to restrict external entity references. When an optional, non-default message-processing feature is enabled, a remote and unauthenticated sender...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libheif vulnerabilities (USN-8846-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8846-1 advisory. Yuqi Qiu and Xiang Li discovered that libheif incorrectly handled certain compressed metadata. A remote...

AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (ALMALINUX9.2:CLSA-2026:1771951235)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1771951235 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to...

CentOS Linux 7 [TuxCare] Security Update: python3-pip (CENTOS7:CLSA-2026:1786355121)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1786355121 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to...

SUSE CVE-2026-97452

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

USN-8846-1 libheif vulnerabilities

Yuqi Qiu and Xiang Li discovered that libheif incorrectly handled certain compressed metadata. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-84384 Yuqi Qiu and Xiang Li discovered that libheif...

USN-8846-1: libheif vulnerabilities

Yuqi Qiu and Xiang Li discovered that libheif incorrectly handled certain compressed metadata. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-84384 Yuqi Qiu and Xiang Li discovered that libheif...

Security Bulletin: Multiple Vulnerabilities affect IBM Tivoli Netcool Impact

Summary Multiple vulnerabilities were addressed in IBM Tivoli Netcool Impact version 7.1.0.39 Vulnerability Details CVEID:CVE-2026-42402 DESCRIPTION: Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy...