PoC-CVE-2025-63406

CVE-2025-63406 – Prueba de Concepto PoC de Investigación de Seguridad Este repositorio contiene una Prueba de Concepto PoC orientada a la investigación relacionada con el problema de seguridad CVE-2025-63406 , que afecta a la plataforma GroupOffice. El propósito de este proyecto es estudiar y...

CVE-2018-10933

CVE-2018-10933 Se encontró una vulnerabilidad en la máquina de estados del lado del servidor de libssh antes de las versiones 0.7.6 y 0.8.4. Un cliente malicioso podría crear canales sin realizar primero la autenticación, lo que resulta en acceso no autorizado. ALGUNOS DETALLES El problema provie...

EUVD-2026-77008

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

ai-vuln-rediscovery-nginx-cve-2026-42945

AI辅助重新发现nginx中的CVE-2026-42945 本仓库记录了一个可复现的AI辅助漏洞重新发现实验，针对nginx的ngxhttprewritemodule，该漏洞后来被关联为CVE-2026-42945。 该实验刻意缩小范围。易受攻击的文件src/http/ngxhttpscript.c被直接提供给模型进行审计。这并非声称AI系统从头开始自主地在完整的nginx代码库中找到了该问题。 摘要 被审计的漏洞是一个由nginx重写处理中脚本引擎状态过时导致的堆缓冲区溢出。 在高层面上： 1. 一个包含?的rewrite替换会设置e-isargs = 1。 2...

CVE-2026-89080

The Really Simple Security WordPress plugin before 9.8.1 is vulnerable to an unauthenticated 2FA bypass via email provider state demotion . A request that resets a completed email two-factor enrolment allows an attacker who already possesses the account's password to bypass the second factor and ...

CVE-2026-89080 Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion

The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...

CVE-2026-52134-libiec61850

CVE-2026-52134: Replay de GOOSE y manejo de frescura de mensajes en libiec61850 v1.6 Estado Se ha asignado CVE-2026-52134. La publicación del registro CVE correspondiente está pendiente. Producto afectado Proveedor: MZ Automation GmbH Producto: libiec61850 Versión probada: 1.6 Estado de otras...

PT-2026-90856

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the snd ctl ascii elem id parse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002402 advisory. In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, lik...

cve-2024-21978-poc

Vulnerabilidad en el firmware SEV Este repositorio contiene un exploit para una vulnerabilidad en el firmware SEV. El exploit permite descifrar memoria arbitraria de un invitado SEV-SNP en ejecución. Probado en la versión 1.55.16 la más reciente en el momento de escribir esto. Causa raíz El campo...

react-cve-2025-55182

CVE-2025-55182: Prueba de React/Next.js Estado del proyecto: Experimental / Prueba de concepto Este repositorio sirve como un entorno de investigación controlado y un marco de prueba de concepto PoC para analizar CVE-2025-55182. Demuestra una vulnerabilidad de contaminación de prototipos en el...

Linux Distros Unpatched Vulnerability : CVE-2026-89660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4client; a stateid reference does not pin it. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-80977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy uarg and clears SKBFLALLZEROCOPY, and skbzcopydowngrademanaged...

Linux Distros Unpatched Vulnerability : CVE-2026-81005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi...

Linux Distros Unpatched Vulnerability : CVE-2026-89754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagewalk: fix stale walk-action escaping walkpmdrange If -pmdentry sets walk-action = ACTIONAGAIN, the pmdnone check is retried. The PMD entry may be cleared...

CVE-2026-80989

A flaw was found in the Linux kernel's Thunderbolt networking subsystem. When a Thunderbolt connection fails to establish, the system may not correctly update its state, leading to repeated attempts to tear down an already inactive connection. This can result in a kernel warning and, under certai...

CVE-2026-89773

A flaw was found in the drm/amd/display component of the Linux kernel. This vulnerability occurs because the High-bandwidth Digital Content Protection HDCP configuration routine is skipped during a transition state when an invalid dmstreamctx is present. This can lead to the HDCP routine not bein...

CVE-2026-89754

A flaw was found in the Linux kernel's memory management mm/pagewalk component. An issue in the walkpmdrange function, where a stale walk-action state is not properly reset, can lead to duplicate walk callbacks. A local attacker could exploit this to trigger an out-of-bounds write, potentially...

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

Summary Mockoon's admin API commons-server/src/libs/server/admin-api.ts is mounted on the same Express listener as the user-defined mock routes, enabled by default in every shipped runtime commons-server, CLI, serverless, serves Access-Control-Allow-Origin: on every endpoint with all HTTP methods...

snapchange

Snapchange Fuzzing ligero de una instantánea de memoria usando KVM Snapchange proporciona la capacidad de cargar un volcado de memoria en bruto y el estado de los registros en una máquina virtual VM de KVM para su ejecución. En un punto de la ejecución, esta VM puede restablecerse a su estado...