CVE-2026-80992

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

EUVD-2026-76315

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

CVE-2026-80992 net: ravb: avoid dereferencing an invalid PTP clock

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

CVE-2026-63077

CVE-2026-63077 — JetBrains TeamCity Ejecución Remota de Código No Autenticada -red.svg Ejecución Remota de Código Crítica No Autenticada CVSS 9.8 — Explotada Activamente en el Medio Silvestre Este repositorio contiene un exploit de prueba de concepto PoC totalmente funcional para CVE-2026-63077 ,...

EUVD-2026-76245

Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft. The same...

CVE-2026-89298

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

WordPress Registration Form for WooCommerce plugin 1.1.0-1.1.2 - Contributor+ Privilege Escalation vulnerability

Contributor+ Privilege Escalation vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Registration Form for WooCommerce versions 1.1.0-1.1.2...

CVE-2026-89298 Keycloak-services: keycloak-services: confidential client secret disclosed to view-clients role via client registration get

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

EUVD-2026-76104

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

CVE-2026-89298

A flaw in Keycloak 's Dynamic Client Registration service allows a user with the view-clients role to retrieve a client's confidential secret in cleartext via the client registration GET endpoint. The root cause is a failure to mask sensitive information when returning client details. A read-only...

CVE-2026-89298

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

CVE-2026-51788

Aviso de Seguridad: CVE-2026-51788 Vulnerabilidad de Denegación de Servicio DoS en cleverangeauth v0.1.10 ID de CVE: CVE-2026-51788 Estado: Asignado Fecha de descubrimiento: 2026-04-27 Investigador: Aykhan Isgandarli Gravedad: Alta CVSS v3.1: 7.5 Vector CVSS:...

Improper Authorization

Apache CXF is vulnerable to Improper Authorization. The vulnerability is due to the OAuth2 Dynamic Client Registration endpoint accepting and storing client-supplied scope values without validating them against an allowed scope list, which allows an attacker to self-assign privileged scopes durin...

Monitor

Descripción del proyecto Se utiliza para mantener privilegios en la fase de post-explotación. Uso del proyecto Paso 1 : Descargue el proyecto y compile Monitor.cpp con Visual Studio; también puede usar el ya compilado. El código de Monitor.cpp es el siguiente: root@kitploit: include "Windows.h" i...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – Desbordamiento de búfer en mensaje NAS 5G en gNodeB Código del programa simulación en C root@kitploit: // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length...

CVE-2024-54363

CVE-2024-54363 Wp NssUser Register successful, just Check this: Login...

CVE-2025-2563

CVE-2025-2563 — Registro de Usuario y Membresía | Escalada de Administrador de Cadena Completa root@kitploit: ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║ ██║╚════██║██╔═...

CVE-2025-11986

1 Extraer el nonce público cryptoajax de la página restringida root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' NONCE=$curl -s "http://localhost/wordpress/" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if...

PT-2026-90301

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG CHARLCD BL FLASH, charlcd init schedules bl work before charlcd register calls misc register. If registration fails, the caller frees the charlcd obje...

PT-2026-90168

In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm iommu probe adds its devm-managed IOMMU object to qcom iommu devices before adding the IOMMU sysfs device and registering it with the IOMMU core. If iommu device sysfs add...