EUVD-2026-89923

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

CVE-2026-97274 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

cve-2023-44487

CVE-2023-44487 HTTP/2 Restablecimiento Rápido Hay algunos ejemplos en este repositorio que no se han probado completamente para analizar el impacto, pero solo quería realizar el concepto de este ataque starting many streams and immediately sending RSTSTREAM frame to avoid reaching...

CVE-2025-55182-Lab

Laboratorio CVE-2025-55182 Un laboratorio práctico para explotar CVE-2025-55182 React2Shell - Ejecución remota de código en React Server Components. ⚠️ Aviso legal Solo con fines educativos. Prueba únicamente en sistemas que te pertenezcan. Inicio rápido Clonar e iniciar git clone...

ROS-20260930-73-0140

The vulnerability of the Linux operating system’s kernel is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

CentOS Linux 7 [TuxCare] Security Update: dnsmasq / dnsmasq-utils (CENTOS7:CLSA-2026:1778157268)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778157268 advisory. - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed ...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Rapid Reset Hay algunos ejemplos en este repositorio que no están probados completamente para analizar el impacto, pero solo quería llevar a cabo el concepto de este ataque iniciar muchos flujos y enviar inmediatamente la trama RSTSTREAM para evitar alcanzar...

CVE-2025-49132

Escáner de Vulnerabilidades Independiente CVE-2025-49132 Implementación Sin Docker Este escáner opera directamente sobre Python sin dependencias de Docker, adecuado para entornos donde Docker no está disponible o no se prefiere. Instalación pip install -r requirements-standalone.txt Instalación...

phantom-grid

Phantom Grid - Enterprise Zero Trust Network Access ZTNA Phantom Grid is a next-generation Zero Trust Network Access ZTNA and active defense system. It operates at both the Kernel Level eBPF and Application Level mTLS to transform Linux servers into a robust, deceptive attack surface. Built for...

enseal

enseal Compartir secretos seguros y efímeros para desarrolladores. Deja de pegar secretos en Slack. enseal hace que la vía segura sea más rápida que la insegura — comparte archivos .env y secretos a través de canales cifrados de un solo uso con un solo comando y sin configuración.bash sender $...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - bypass de SAML SSO fofa: app="ZABBIX-监控系统" && body="saml"...

CVE-2022-2588

CVE-2022-2588 Código adaptado para una CPU, y con un archivo Vagrant proporcionado para arrancar una máquina vulnerable utilizada con fines educativos. Para crear una máquina vulnerable, necesitas tener Vagrant instalado en tu máquina, luego ejecuta en la raíz del repositorio: Vagrant up Espera l...

CVE-2015-3306

CVE-2015-3306 Esto contiene un exploit de un solo archivo para la vulnerabilidad modcopy CVE-2015-3306 de ProFTPd 1.3.5, especialmente para el laboratorio Kenobi de TryHackMe. Descripción de la vulnerabilidad CVE-2015-3306 es una vulnerabilidad encontrada en ProFTPd 1.3.5 debido a una falla en el...

CVE-2026-97863

The ciscofiresightmanagerACLruleexport module in misp-modules generates a shell script .sh that authenticates to and calls the Cisco fireSIGHT Manager API. The module interpolates configuration values IP address, login, password, domain ID, policy ID and MISP attribute values destination IPs, URL...

CVE-2026-97863

The cisco_firesight_manager_ACL_rule_export module in misp-modules is vulnerable to Shell Command Injection . The module generates a .sh script by interpolating configuration and MISP attribute values (such as destination IPs and URLs) into single-quoted shell strings without proper escaping. An ...

CVE-2026-97863 misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values

The ciscofiresightmanagerACLruleexport module in misp-modules generates a shell script .sh that authenticates to and calls the Cisco fireSIGHT Manager API. The module interpolates configuration values IP address, login, password, domain ID, policy ID and MISP attribute values destination IPs, URL...

ROS-20260925-73-0161

The vulnerability of the funexecop function in the drivers/mtd/nand/raw/fslupm.c file of the memory driver for the Linux operating system is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

CVE-2026-79763

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

CVE-2026-79763 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...