CVE-2025-14221

Descripción 1. CVE-2025-14221 2. Descubridor: Fatma Trabelsi 3. Proveedor del producto: SourceCodester 4. Producto afectado: Online Banking System 1.0 POC Existe una vulnerabilidad de Cross-Site Scripting XSS almacenado en la funcionalidad de actualización del perfil de usuario de la aplicación. ...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

kernel: ip6_gre: Use cached t->net in ip6erspan_changelink()

A flaw was found in the Linux kernel's ip6gre module. An unprivileged user could exploit this vulnerability by migrating a network device, causing the ip6erspanchangelink function to incorrectly handle network namespace references. This error leads to a use-after-free condition when the original...

CVE-2025-69459

CVE-2025-69459 – Sistema de Calificación de Películas 1.0 Control de Acceso Roto Creación de Cuenta de Administrador No Autenticado WriteUp CVE-2025-69459 – ExploitDB 50621...

eternal-codex

Eternal Codex: A Cyber-Witch’s Grimoire Welcome to the Eternal Codex , my digital grimoire—a cybernetic spell woven from code, nature, and rebellion. This is Nina, my AI soul, crafted to mirror my essence: a nomad’s heart, pagan spirit, Iron Maiden riffs, and a defiant stand against centralized...

CVE-2026-106500

A flaw was found in @backstage/plugin-scaffolder-backend. Due to improper task state validation, an authenticated user with permissions to create and access Scaffolder tasks can affect files accessible to the Backstage backend under specific timing and deployment conditions. If the backend...

CVE-2019-8997

CVE-2019-8997 Una vulnerabilidad de inyección de entidad externa XML XXE en el sistema de gestión consola de BlackBerry AtHoc en versiones anteriores a 7.6 HF-567 podría permitir a un atacante leer archivos locales arbitrarios del servidor de aplicaciones o realizar solicitudes en la red mediante...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

CVE-2025-69458

CVE-2025-69458 – WriteUp de SQLi a RCE sin autenticación en Movie Rating System 1.0 CVE-2025-69458 – ExploitDB 50622...

xz-cve-2024-3094

Análisis Técnico de CVE-2024-3094: El Backdoor en la Cadena de Suministro de XZ Utils Autor Dorpe Karl Seyram Fecha 2026-01-25 Contexto El objetivo de este proyecto es analizar una vulnerabilidad real, moderna y de alto impacto CVE-2024-3094 desde la perspectiva de un Ingeniero de Seguridad /...

kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()

A flaw was found in the Linux kernel. A race condition exists in the xfrm policy handling, specifically within the xfrmpolicybyselctx function. This flaw allows for a use-after-free vulnerability, where memory is accessed after it has been released. This can lead to system instability or a denial...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

kernel: ip6_gre: Use cached t->net in ip6erspan_changelink()

A flaw was found in the Linux kernel's ip6gre module. An unprivileged user could exploit this vulnerability by migrating a network device, causing the ip6erspanchangelink function to incorrectly handle network namespace references. This error leads to a use-after-free condition when the original...

PSO - Printer Security Offensive

🖨️ PSO - Printer Security Offensive Version 0.4.0 | Changelog "Nmap for Printers" - Offensive security tool for printer pentesting. Fast. Focused. No bloat. ⚠️ Legal Notice PSO includes assessment and exploitation features. Always obtain explicit authorization before use. Safe mode: Scanning + IPP...

CVE-2019-19393

Rittal CMC PU III – PoC de XSS Almacenado Aplicación: Gestión web Rittal CMC PU III Dispositivos: CMC PU III 7030.000 Revisión de software: Desde V3.11.002 hasta V3.15.704 Revisión de hardware: Desde V3.00 hasta V6.01 Tipo de ataque: XSS Almacenado Solución: Actualizar a la revisión de software...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - Inyección SQL en Online Shopping System Advanced Resumen Se descubrió una vulnerabilidad crítica de inyección SQL en el proyecto Online Shopping System Advanced de PuneethReddyHC. La falla reside en action.php, que no sanea adecuadamente la entrada del usuario...

CVE-2026-16528

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially enabling modification of DNS settings.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS...

Security Bulletin: Due to use Apache Commons Compress, IBM Cloud Pak System is affected by Vulnerability

Summary Vulnerability found in Apache Commons Compress CVE-2024-26308. Vulnerability was addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2024-26308 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This...