389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet()

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-56291

CVE-2026-56291 — Exploit RCE Masivo de Balbooa Forms para Joomla Pre-Auth form.uploadAttachmentFile → Sin CSRF → Subida PHP Resumen CVE-2026-56291 es una vulnerabilidad crítica CVSS 9.8 de subida arbitraria de archivos sin autenticación en la extensión de Joomla Balbooa Forms combaforms 2.4.1. La...

CVE-2025-22953

CVE-2025-22953 – Epicor HCM Unauthenticated Blind SQL Injection Update – Patch Released by Epicor Epicor has officially released a patch addressing this vulnerability. All affected users are strongly advised to apply the update immediately. 🔗 Epicor Security Patch Announcement Summary An...

CVE-2026-12962

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the ' Securi...

CVE-2021-32099

CVE-2021-32099 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2021-32099 vulnerability, affecting Pandora FMS 742. The exploit shows how an unauthenticated attacker can leverage a SQL injection vulnerability to escalate an unprivileged session to an administrator-level...

ActiveMQ-CVE-2023-46604

Validador Seguro de CVE-2023-46604 para ActiveMQ Un validador de un solo archivo y no destructivo para Apache ActiveMQ CVE-2023-46604. Inicia su propio servidor de callback HTTP, genera XML de Spring específico para el objetivo en memoria, envía el paquete OpenWire manipulado, correlaciona los...

CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

EUVD-2026-72617

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

CVE-2026-86511

A resource consumption vulnerability exists in the java-json-tools jackson-coreutils 2.0 library, specifically in the BigDecimal.toPlainString function within the file JacksonUtils.java . A remote attacker with no authentication and low complexity can trigger this flaw to degrade availability. A ...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 Un generador de artefactos de detección de omisión de autenticación de certificados IKEv1 de VPN de acceso remoto Check Point. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e Consulte nuestra publicación en el blog para obtener detalles técnicos...

CVE-2026-48907

CVE-2026-48907 — Laboratorio de RCE no autenticado en Joomla JCE PSsec Laboratorio educativo de investigación de seguridad para CVE-2026-48907. Resumen CVE-2026-48907 es una vulnerabilidad crítica CVSS 10.0 de ejecución remota de código no autenticada en JCE Joomla Content Editor , la extensión d...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 Este es un programa Python3 que explota la vulnerabilidad de RCE autenticada de GitLab conocida como CVE-2022-2884. DESCARGO DE RESPONSABILIDAD Esta herramienta está destinada a ingenieros de seguridad y personal de appsec para evaluaciones de seguridad. Úsela de manera...

CVE-2026-13768

CVE-2026-13768 - Gardyn IoT Hub Owner Key Exposure !WARNING This repository contains a fully functional proof-of-concept for a high-severity IoT vulnerability. This code is provided strictly for educational purposes, authorized security research, and defensive testing. Unauthorized use is illegal...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: RCE y escalada de privilegios de Domain Admin para Mailcow. Incluyendo POC. Reportado y corregido: 2022-05 Versión parcheada: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245:...

CVE-2021-3130

CVE-2021-3129 ¡Otro exploit más para CVE-2021-3129! Diseñado para ofrecer más funciones y fiabilidad. Basado en https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DESCARGO DE RESPONSABILIDAD: Este script está hecho para auditar la seguridad de los sistemas. Utilice est...

HTB-DevHub

HackTheBox — DevHub CVE-2026-23744 | MCPJam Inspector RCE no autenticado Dificultad: Media SO: Linux Cadena de explotación root@kitploit: ┌─────────────────────────────────────────────────────┐ │ CVE-2026-23744 │ │ Unauthenticated POST → /api/mcp/connect │...

watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520 and CVE-2026-10523 An Ivanti Sentry Authentication Bypass and Remote Code Execution Detection Artifact Generator. See our blog post for technical details. Detection in Action root@kitploit: $ python3 watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523.py --url...

vBulletin_5.x-tab_panel-RCE

vBulletin5.x-tabpanel-RCE CVE-2020-17496 es una vulnerabilidad en la ruta ajax/render/widgetphp de vBulletin que permite inyectar código malicioso a través del parámetro widgetConfig. Sistema afectado vBulletin 5.5.4 5.6.2 Script de prueba de la vulnerabilidad RCE del Widgettabbedcontainertabpane...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 Script de prueba de vulnerabilidad RCE XworkStruts El analizador Jakarta Multipart en Apache Struts 2 2.3.x anteriores a 2.3.32 y 2.5.x anteriores a 2.5.10.1 tiene un manejo incorrecto de excepciones y generación de mensajes de error durante los intentos de carga de...