CVE-2025-27591

CVE-2025-27591 introducción below versiones v0.9.0 son vulnerables a una vulnerabilidad de escalada de privilegios local debido a que el programa crea un archivo de log escribible por todos, en lugar de un archivo de log escribible por todos; el atacante puede reemplazar el archivo de log con un...

CVE-2025-8088

POC para CVE 2025-8088 WinRAR -o...

CVE-2026-33017

Mi implementación simple en bash de CVE-2026-33017. Consulta el siguiente enlace para una explicación detallada: https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx Usa nc -lvnp PORT para recibir la shell callback...

PT-2026-106736

Name of the Vulnerable Software and Affected Versions Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator versions prior to 2.1 Description An OS command injection flaw exists in the shell-based temporary-file cleanup instructions. An attacker can execute arbitrary command...

PT-2026-106361

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

PT-2026-107259

Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...

PT-2026-106738

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type text and launch app tools in ufo/client/mcp/http servers/mobile mcp server.py pass the authenticated caller-controlled text and package name parameters into adb shell comma...

PT-2026-107229

Name of the Vulnerable Software and Affected Versions Ghostscript versions 10.00.0 through 10.07.1 Description A flaw exists when rendering crafted PostScript or EPS documents, allowing a bypass of the -dSAFER sandbox. This is achieved by chaining memory corruption during document parsing with th...

PT-2026-107255

Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...

PT-2026-106750

Name of the Vulnerable Software and Affected Versions Microsoft UFO versions prior to 3.0.9 Description The press key tool in ufo/client/mcp/http servers/mobile mcp server.py accepts a free-form key code parameter and passes it to adb shell input keyevent. The adb client joins the arguments into ...

Linux Distros Unpatched Vulnerability : CVE-2026-102828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until...

Debian dsa-6548 : node-shell-quote - security update

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6548 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6548-1 [email protected] https://www.debian.org/securit...

An input validation and command injection vulnerability exists in the firmware download and upgrade component of Brocade Fabric OS

: Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted into system command strings and executed through a system shell interface. Because control...

CVE-2026-81780-Hash-Form

CVE-2026-81780-Hash-Form CVE-2026-81780 — Hash Form RCE La vulnerabilidad Carga de archivos sin autenticación en el plugin Hash Form de WordPress ≤ 1.4.2. El plugin permite la carga arbitraria de archivos sin una autenticación adecuada ni validación del tipo de archivo, lo que conduce a la...

EUVD-2026-89334

simple-git unsafe-operation guard does not block trailer command configuration...

CVE-2025-5548

🐞CVE-2025-5548 Desbordamiento de búfer en FreeFloat FTP Server 1.0 🎯 Explotación de Desbordamiento de Búfer en la Pila Este repositorio contiene la documentación y el desarrollo práctico de un proyecto de ciberseguridad centrado en la ingeniería inversa y la explotación de vulnerabilidades a nive...

CVE-2021-4034

CVE-2021-4034 Un día para el exploit de escalada de privilegios de polkit Solo ejecuta make, ./cve-2021-4034 y disfruta de tu shell de root. El aviso original de los autores reales está aquí PoC Si el exploit funciona, obtendrás una shell de root inmediatamente:...

webmin_1.920

CVE-2019-15107 Webmin 1.920 Ejecución Remota de Comandos Sin Autenticación Un script de python3 para la ejecución remota de comandos sin autenticación en Webmin 1.920 CVE-2019-15107 que crea una shell reversa o una shell pseudo interactiva usando mkfifo para evadir el firewall. Un script de pytho...

CVE-2026-62735

CVE-2026-62735 Information This vulnerability was originally discovered by Siyeon Wi. I reproduced the vulnerability independently for educational and case-study purposes. The vulnerability was also demonstrated at Pwn2Own Berlin 2026. References: TrendAI Zero Day Initiative status TrendAI Zero D...

CVE-2026-24061-setup

Configuración de CVE-2026-24061 Este repositorio contiene la configuración de Docker para CVE-2026-24061. Una vez que hayas instalado Docker, solo tienes que hacer lo siguiente: 1. Clona este repositorio. 2. Ejecuta el siguiente comando: sudo docker build . --tag telnetd-auth-bypass 3. Una vez qu...