Astra Linux – Vulnerability in Linux

The file arch/powerpc/kvm/book3srtas.c in the Linux kernel, as of version 5.13.5 on the PowerPC platform, allows KVM guest OS users to cause memory corruption in the host OS through rtasargs.nargs, also known as CID-f62f3c20647e...

Astra Linux – Vulnerability in dovecot

The attacker can upload a malicious Sieve script through the ManageSieve service or locally to bypass the configured CPU time limits for Sieve up to 130 times the configured limit. This allows the attacker to degrade server performance and bypass the configured CPU time limits for Sieve scripts. ...

Astra Linux – Vulnerability in pcre2

A out-of-bounds read was discovered in PCRE before version 10.34, where the pattern \X was JIT-compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, as it could allow an attacker to cause the...

Astra Linux – Vulnerability in liblivemedia

In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server’s handling of the RTSP “PLAY” command, especially when the command specifies seeking by absolute time...

CVE-2026-12882

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to parse Markdown autolinks with unmatched trailing closing parentheses in linear time, which allows an authenticated user with permission to create posts to cause excessive server CPU consumption and...

EUVD-2026-77380

Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder Free and Pro 5.2.1 - 6.9.0 - plgContentSppagebuilder::onContentAfterSave read jformattribssppagebuilderarticleid from the request and concatenated it directly into the WHERE viewid ...

CVE-2026-78375

SP Page Builder (Free and Pro) by joomshaper.com, a Joomla extension, is affected by an authenticated privileged SQL injection in versions 5.2.1 through 6.9.0 . The vulnerable function plgContentSppagebuilder::onContentAfterSave() reads jform[attribs][sppagebuilder_article_id] from the request an...

CVE-2026-42647-Lab

CVE-2026-42647 - Inyección SQL ciega basada en tiempo no autenticada en JoomSport a través de sortf Resumen ejecutivo Este repositorio contiene un laboratorio Docker local para reproducir y validar CVE-2026-42647, una vulnerabilidad de inyección SQL no autenticada que afecta al plugin de WordPres...

zephyr

ElasticSearch index map examples This directory contains ElasticSearch data store index map examples for use by uploadtestresultses.py script for Twister JSON reports upload. An index map file allows to create destination index files on ElasticSearch server with explicit scheme having all require...

CVE-2014-9173

CVE-2014-9173: Google Document Embedder - Explotación de Inyección SQL Ciega Basada en Tiempo Autor: ratiros01 PoC original: https://www.exploit-db.com/exploits/35371...

CVE-2026-45321-Tanstack

Simulación de Ataque a la Cadena de Suministro — CVE-2026-45321 TanStack Laboratorio educativo para comprender los ataques a la cadena de suministro de npm, el abuso de CI/CD y la ejecución de código en el momento de la instalación. Descargo de responsabilidad Este proyecto se crea únicamente par...

CVE-2024-8856

CVE-2024-8856 Esta herramienta escanea sitios web de WordPress en busca de vulnerabilidades en el plugin WP Time Capsule relacionadas con CVE-2024-8856. Identifica las versiones del plugin inferiores a "1.22.22" como vulnerables y registra los resultados en "vuln.txt". Simple y eficiente, ayuda a...

CVE-2026-45321-Tanstack

供应链攻击模拟 — CVE-2026-45321 TanStack 用于理解 npm 供应链攻击、CI/CD 滥用和安装时代码执行的教育性实验环境 免责声明 本项目仅用于： 网络安全学习， 防御性安全研究， 本地实验模拟， 理解供应链攻击的概念。 请勿将本项目用于： 攻击真实系统， 窃取凭证， 恶意软件部署， 未授权访问， 或其他非法活动。 描述 本实验模拟了该安全事件的基本概念： CVE-2026-45321 TanStack npm 供应链攻陷 GitHub Actions CI/CD 滥用 npm 生命周期脚本执行 模拟在本地安全进行，不会： 真正窃取凭证， 泄露令牌，...

poc-CVE-2019-9053

PoC CVE-2019-9053 - CMS Made Simple SQL Injection PoC didáctico en Python 3 para la CVE-2019-9053, una vulnerabilidad de SQL Injection time-based blind en CMS Made Simple = 2.2.9. Esta versión ha sido modificada para uso en CTF/laboratorio. Posee prefijos preconfigurados para reducir el tiempo de...

CVE-2024-32640

CVE-2024-32640 MySQL Blind SQL Injection Proof of Concept This Python script demonstrates a time-based blind SQL injection exploit for MySQL databases , specifically designed for CVE-2024-32640. It can be used to verify vulnerability in a target URL, and if the vulnerability exists, extract...

cms-made-simple-python3

CMS Made Simple – Exploitation Toolkit A collection of scripts, notes, and Python3–ready exploits for CMS Made Simple CMSMS , including the famous Unauthenticated Time-Based SQL Injection – CVE-2019-9053. This repository is created and maintained by Encrypticle Jagdeep Singh as part of my...

CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-

CVE-2019-9053 - CMS Made Simple SQL Injection Exploit Modified Description This is a modified version of the time-based SQL injection exploit for CMS Made Simple = 2.2.9. The exploit was originally created by Daniele Scanu and has been updated for better compatibility and modern Python practices...

lab-cve-2025-57819

Trabajo en curso Laboratorio FreePBX CVE-2025-57819 - Cadena de SQLi sin autenticación → RCE PoC de Nuclei Pon en marcha un laboratorio reproducible de FreePBX 15 Docker para validar CVE-2025-57819 — una inyección SQL crítica no autenticada en los endpoints AJAX de userman que puede encadenarse...

CVE-2025-65950

CVE-2025-65950: WBCE CMS es vulnerable a inyección SQL ciega basada en tiempo a través del parámetro groups Resumen c. Capture la solicitud POST enviada a /wbce/admin/users/save.php cuando se hace clic en el botón "Guardar"...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 📖 Description This repository contains a high-performance, parallelized...