CVE-2025-52914

CVE-2025-52914 ¿Cómo funciona este método de detección? Las versiones se extraen de los hosts objetivo, específicamente de la respuesta HTML SVRVER en el cuerpo, y luego se comparan con versiones anteriores a 9.3.1 y versiones desde 10.0.26 hasta 10.1.101 inclusive. ¿Cómo ejecuto este script? 1...

cve-2023-45612_exploit

cve-2023-45612exploit CVE-2023-45612 は、2023 年に修正された、Ktor の XML シリアライゼーションに対する XXE XML 外部エンティティ 攻撃を可能にする深刻度の高いセキュリティ問題です。 セキュリティ問題の再現 以下は、この問題を再現した詳細な方法です。 IntelliJ IDEA プロジェクト まず、XML ファイルを処理するサーバーが必要です。IntelliJ IDEA から Kotlin プロジェクトを作成し、必要な Ktor の依存関係とシリアライゼーションプラグインを使用するために build.gradle.kts...

CVE-2026-59680

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, getpasswordterm in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString, which performs no numeric validation, and passed the resulting...

CVE-2026-59681

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

CVE-2026-15101

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-D0cker

CVE-2026-Pending: runC maskPaths 脆弱性によるコンテナエスケープ 深刻度: クリティカル CVSS 9.8 コンポーネント: opencontainers/runc libcontainer 脆弱性タイプ: CWE-59: ファイルアクセス前のリンク解決の不備 'Link Following' 🚨 エグゼクティブサマリー runc の maskPaths 関数に重大な脆弱性が存在します。コンテナ内の機密パス 例: /proc/kcore をマスクする際、runc は os.OpenFilepath, OPATH, 0 を ONOFOLLOW...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

Este repositorio documenta la implementación de Microsoft Defender for Endpoint en un dispositivo Windows 11, incluida la incorporación mediante script local, la habilitación de la detección de dispositivos, la configuración de la detección de Log4j2 CVE-2021-44228 y la validación de los flujos d...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. CVE-2026-59893: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS bsc1275461...

CVE-2012-2122-Home-Lab

INGLÉS ABAJO CVE-2012-2122 Laboratorio Local de Omisión de Autenticación de MySQL Este laboratorio es un ejemplo de demostración de la vulnerabilidad CVE-2012-2122 - MySQL Authentication Bypass Se debe a un error en la comparación de los valores de las contraseñas en MySQL versión 5.5.23 o inferi...

wBlock v3.0.0

wBlock The end of Safari ad-blocking B.S. A Safari content blocker for macOS, iOS, iPadOS, and visionOS. 750,000 rules across 5 extensions, Protocol Buffer storage, LZ4 compression, and iCloud sync. !NOTE Looking for a detailed comparison? Check out my comparison guide to see how wBlock stacks up...

Exploit-dev-sandbox

MSAK Web Vulnerability Scanner A from-scratch, command-line w...

CVE-2026-59681

CVE-2026-59681 is an OS command injection in yast2-auth-client (SUSE/YaST). The vulnerable code in Auth::AuthConf (src/lib/auth/authconf.rb) interpolates unsanitized Active Directory configuration values—Organizational Unit , dnsHostName , AD user name, and AD domain name—directly into net ads jo...

CVE-2026-59681 yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

EUVD-2026-69001

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

CVE-2026-59681 yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

react2shell-poc-CVE-2025-55182

React2Shell PoC CVE-2025-55182 Un script de prueba de concepto PoC para React2Shell CVE-2025-55182, una vulnerabilidad crítica de ejecución remota de código RCE que afecta a aplicaciones Next.js que utilizan Server Actions. !WARNING Aviso legal : Esta herramienta es solo para fines educativos y d...

polkit-CVE-2021-3560_writeup

Try Hack Me - Polkit:CVE-2021-3560 Autor: Atharva Bordavekar Dificultad: Info Puntos: 32 Vulnerabilidad: CVE-2021-3560 Primero verificaremos la versión de polkit instalada para tener una mejor idea. root@kitploit: apt list --installed | grep policykit-1 policykit-1/focal,now 0.105-26ubuntu1 amd64...

CVE-2026-15101 WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

EUVD-2026-69000

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-15101 WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...