CVE-2025-24813

Apache Tomcat RCE sin autenticar - CVE-2025-24813 Este repositorio proporciona una guía y un entorno de prueba para evaluar la vulnerabilidad CVE-2025-24813. Detalles Versiones afectadas: Apache Tomcat 11.0.0-M1 a 11.0.2 Apache Tomcat 10.1.0-M1 a 10.1.34 Apache Tomcat 9.0.0.M1 a 9.0.98 Referencia...

trackem

trackem Passive Device Tracker AndroidTrackEm Mobile is a real-time, passive Wi-Fi + Bluetooth LE probe-request scanner designed for OSINT, red-team ops, and wireless research.It listens for client devices phones, laptops, IoT that are actively broadcasting the names of Wi-Fi networks...

CVE-2026-52806

Gogs RCE — Argument Injection in git rebase CWE-88 Authenticated remote code execution against Gogs is parsed by Git as the --exec flag rather than a positional argument, causing sh -c to run after each replayed commit during the rebase. How the exploit works 1. Pre-flight — determines if the...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 What is the vulnerability about? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request...

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; y "FIRMWARE VERSION: OPV3.3.1-191028" Un atacante remoto puede realizar un ataque de falsificación de petición en sitios cruzados CSRF en "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version:...

CVE-2026-104713 Apache Struts: Unbounded request body read in the REST plugin

Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate memory in proportion to its size, exhausting the Java heap a...

CVE-2026-104713 Apache Struts: Unbounded request body read in the REST plugin

Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate memory in proportion to its size, exhausting the Java heap a...

CVE-2026-104712 Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both Transfer-Encoding: chunked and Content-Length headers. While Netty correctly strips the conflicting Content-Length header for HTTP/1.1 messages, thi...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update

A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

UBUNTU-CVE-2026-93319

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

CVE-2025-30208

CVE-2025-30208 Usando una cadena de consulta de importación raw especial en un servidor de desarrollo de Vite, un atacante puede leer archivos arbitrarios Resumen del CVE Los servidores de desarrollo de Vite anteriores a 6.2.3, 6.1.2, 6.0.12, 5.4.15 y 4.5.10 pueden eludir las comprobaciones de...

CVE-2023-5561-POC-Updated

CVE-2023-5561-POC-Updated Este repositorio contiene una versión modificada del Prueba de Concepto PoC original para CVE-2023-5561. El PoC original, que se puede encontrar aquí, envía un alto volumen de solicitudes en paralelo, lo que puede activar los Firewalls de Aplicaciones Web WAF o provocar...

RCE_CVE-2024-7954-

RCECVE-2024-7954- El plugin porteplume utilizado por SPIP antes de 4.30-alpha2, 4.2.13 y 4.1.16 es vulnerable a una ejecución de código arbitrario. Un atacante remoto no autenticado puede ejecutar PHP arbitrario como el usuario de SPIP enviando una solicitud HTTP manipulada. CRÍTICO Exploit: POST...

CVE-2021-38647

CVE-2021-38647 Este es un POC para CVE-2021-38647 : Envía una solicitud POST a /wsman con el contenido de payload.xml y solo cambia el comando por el que desees, Como POC, solo se ejecuta el comando id. Fuente: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Sígueme si te gus...

Deep-Reaver

Deep Reaver Deep Reaver es un potente kit de evaluación de vulnerabilidades y explotación mejorado con IA, construido en Python. Inspirado en herramientas como Nmap y Nessus, Deep Reaver está diseñado para un escaneo modular y profundo de aplicaciones web y servicios. Características Análisis...

CVE-2026-12171

auto-changelog before 2.6.1 merges configuration from inside the target repository the .auto-changelog file and the auto-changelog key in package.json into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require, so running...

CVE-2026-102777

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 13.0.3 Vulnerability Details CVEID:CVE-2026-33557 DESCRIPTION: A possible security vulnerability has been identified in Apache Kafka. By default, the broker property sasl.oauthbearer.jwt.validator.class is set to...