CVE-2024-27198_Lab

CVE-2024-27198Lab Vulnerability Research & Purple Team Demonstration Lab for JetBrains TeamCity Authentication Bypass CVE-2024-27198 Table of Contents About The Project CVE Details Built With Threat Intelligence & OSINT Real-World Impact & Exploitation Why this CVE is Critical Getting Started...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descripción Esta demostración tuvo lugar en HITCON 2023 en Taiwán. La demo destaca la explotación de AMDCpuProfiler.sys dentro de AMD μProf. Al provocar una escritura arbitraria en el token EPROCESS, se logra una escalada de privilegios al nivel SYSTEM. Deshabilita...

CVE-2025-63314

CVE-2025-63314 - Manejo inadecuado del token de restablecimiento de contraseña en Acora CMS Descubierto por Joby Y Daniel de Crowe India 📌 Resumen DDSN Interactive cm3 Acora CMS versión 10.7.1 contiene una vulnerabilidad de seguridad en su funcionalidad de restablecimiento de contraseña. La...

CVE-2026-20896

Código de la Prueba de Concepto CVE-2026-20896 Este script automatiza la explotación del fallo de lógica en la validación de rutas de la API de Gitea, permitiendo forzar al servidor a otorgar un token administrativo válido mediante un ataque de salto de directorio Directory Traversal en la cabece...

CVE-2026-103321 MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image

MISP contains a stored cross-site script XSS vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored without server-side validation. On the client side, the stored value was rendered into an HTML img element's src attribute via string...

CVE-2018-15133-laravel-framework

CVE-2018-15133 - Laboratorio Vulnerable de Laravel Framework 5.6.x Este repositorio proporciona un laboratorio Docker reproducible para CVE-2018-15133 RCE por deserialización de token en Laravel Framework cuando se conoce APPKEY. La aplicación está fijada a una versión vulnerable de Laravel 5.6.x...

CVE-2025-69516

CVE-2025-69516 - Ejecución Remota de Código en Tactical RMM Este repositorio contiene un script de Python que automatiza la explotación de la vulnerabilidad SSTI CVE-2025-69516 en Tactical RMM. Ha sido probado en la versión 1.3.1. Uso python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id"...

kit-oauth

kit-oauth Biblioteca cliente OAuth 2.0 para aplicaciones Kit TOC Archivos Archivo| Descripción ---|--- .editorconfig| Configuración de formato del editor .gitignore| Reglas de ignorado de Git para artefactos de compilación y dependencias .tool-versions| Versiones de herramientas asdf Zig, Kit...

CVE-2026-97966

A flaw was found in the Linux kernel's Marvell OCTEON TX2 network driver. When tearing down Hierarchical Token Bucket HTB quality-of-service queues, the driver fails to clear hardware scheduler topology configurations before returning queues to the shared pool. A local user with network...

openclaw-hardening-check

Este script solo lee. No arregla nada y no garantiza que estés seguro. La salida verde significa solo que las comprobaciones listadas a continuación pasaron—y nada más. Comprobación de endurecimiento de OpenClaw openclaw-hardening-check.mjs es una pequeña revisión sin dependencias y fuera de líne...

CentOS Linux 8.5 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1773135327)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1773135327 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL th...

Linux Distros Unpatched Vulnerability : CVE-2026-102275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because...

AlmaLinux 9.2 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1771663697)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1771663697 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL th...

Rocky Linux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1771664389)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771664389 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1771664389)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771664389 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL th...

Linux Distros Unpatched Vulnerability : CVE-2026-102271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.preparekey is affected because asymmetric-key guard...

Linux Distros Unpatched Vulnerability : CVE-2026-102268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize...

CVE-2026-55176: Incorrect Authorization

Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js — verifyContainerAuth and authenticateWorkspaceHttp — accept the global CONTAINERSHAREDSECRET as a bearer token without verifying which...

CVE-2026-92899: Authentication Bypass by Spoofing

Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token cannot be reused. It stored the Nonce as raw base64 text, but authentication decodes that text and uses the bytes.The same bytes can be written as base64 in several ways. An attacker who captured an authenticat...

Linux Distros Unpatched Vulnerability : CVE-2026-102422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any...