CVE-2010-3971-hotpatch

CVE-2010-3971-hotpatch Do you own security hotfix with Deviare. Original article: using Deviare to create a temporary zero day patch...

CVE-2021-3156

Este repositorio no tiene un README...

CVE-2026-65182

A flaw was found in Apache Tomcat. This improper access control and incorrect authorization vulnerability allows an attacker to bypass security constraints. This occurs when a security constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path, potential...

CLSA-2026-1788195644 TuxCare security update for axios (5 CVEs)

TuxCare rebuilt axios to address 5 CVEs. Fixed in 1.7.9-tuxcare.4...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

azure-security-auditor

Azure Security Posture Auditor Una herramienta CLI ligera, de estilo producción, que audita las configuraciones de seguridad de Azure y expone errores de configuración comunes — reflejando lo que Microsoft Defender for Cloud comprueba internamente. Comprobaciones...

CVE-2025-4427-CVE-2025-4428

CVE-2025-4428 y CVE-2025-4427 CVE-2025-4428 es una vulnerabilidad de ejecución remota de código posterior a la autenticación en el validador DeviceFeatureUsageReportQueryRequestValidator de EPMM. Surge del manejo inseguro de la entrada proporcionada por el usuario dentro de los mensajes de error...

CVE-2026-80713

A flaw was found in the Linux kernel's iouring subsystem. When a task that has used iouring performs an exec call, its per-task restrictions are not properly preserved. This oversight allows a subsequent iouring ring created by the task to operate without the intended security restrictions,...

ROOT-APP-NPM-GHSA-CJ63-JHHR-WCXV GHSA-cj63-jhhr-wcxv in dompurify - Patched by Root

Root has patched GHSA-cj63-jhhr-wcxv in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-CJMM-F4JC-QW8R GHSA-cjmm-f4jc-qw8r in dompurify - Patched by Root

Root has patched GHSA-cjmm-f4jc-qw8r in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-39Q2-94RC-95CP GHSA-39q2-94rc-95cp in dompurify - Patched by Root

Root has patched GHSA-39q2-94rc-95cp in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41239 CVE-2026-41239 in dompurify - Patched by Root

Root has patched CVE-2026-41239 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in dompurify - Patched by Root

Root has patched CVE-2026-49978 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41240 CVE-2026-41240 in dompurify - Patched by Root

Root has patched CVE-2026-41240 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-1528 CVE-2026-1528 in undici - Patched by Root

Root has patched CVE-2026-1528 in the undici package for Root:npm. Multiple fixed versions available...

serialization-vulnerability-scanner

This repository does not have a README...

ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root

Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44488 CVE-2026-44488 in axios - Patched by Root

Root has patched CVE-2026-44488 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-0000 CVE-2026-0000 in react-leaflet-heatmap-layer - Patched by Root

Root has patched CVE-2026-0000 in the react-leaflet-heatmap-layer package for Root:npm. Multiple fixed versions available...

CVE-2024-10924-PoC

PoC Authentication Bypass MFA Really Simple Security WordPress Plugin | CVE-2024-10924 Accedemos a la página web de wordpress donde veremos que tiene MFA activado a través del plugin vulnerable: Debemos ejecutar la PoC y proporcionar los datos de acceso: De forma automática, se abrirá el navegado...