DeBERTa-ConPara: Attack-Aware and Deployment-Realistic Detection of AI-Generated Text

Robust detection of AI-generated text under deployment conditions is challenging: distribution shifts across domains and generators, adversarial perturbations of the input surface, and the absence of target-domain labels for threshold calibration all degrade detectors that perform well in-domain...

CVE-2025-64458-Demo

CVE-2025-64458 — DoS de Redirección en Django en Windows Descripción Un problema de denegación de servicio DoS en las respuestas de redirección de Django permite a un atacante provocar un trabajo excesivo de la CPU durante la normalización de URL al construir respuestas de redirección. En Windows...

CVE-2026-102474

A heap out-of-bounds write vulnerability exists in dash within the conv_escape function. The printf builtin incorrectly reserves only four bytes for converting Unicode \u or \U escapes , even though multi-byte tokens may require five or six bytes. A local user can trigger this by supplying such e...

CVE-2026-102474 Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation

A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write o...

CVE-2026-102474 Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation

A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write o...

CVE-2026-102474

A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write o...

golang-x-text

Go Text Este repositorio contiene paquetes Go complementarios para el procesamiento de texto, muchos de los cuales involucran Unicode. Versiones de CLDR Es importante que la versión de Unicode utilizada en x/text coincida con la utilizada por tu compilador de Go. El repositorio x/text soporta...

CVE-2026-102272

A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key JWK parser fails to normalize Unicode byte-order marks BOM. In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to...

e-cology

Ejecución remota de código en el componente Beanshell de 泛微 e-cology OA Windows Linux Ps 检测目标系统os.name（因为目标系统是windows的话，执行set等命令，需要手动敲cmd.exe /c set） 使用Unicode绕过exec过滤，部分站点 Payload bsh.script=exec'whoami'; unicode bypass bsh.script=\u0065\u0078\u0065\u0063"whoami"; Comandos útiles de BeanShell In...

CVE-2021-42694

CVE-2021-42694 Genera archivos maliciosos utilizando la vulnerabilidad de ataque homoglifo publicada recientemente, que fue descubierta al menos en C, C++, C, Go, Python, Rust, JS, ... Citado de cve.mitre.org Se descubrió un problema en las definiciones de caracteres de la especificación Unicode...

bidi-guard

bidi-guard Escanea código en busca de caracteres Unicode bidireccionales invisibles Por Qué Existe Esto Los caracteres Unicode bidireccionales invisibles pueden hacer que el código fuente se muestre de forma distinta a como se ejecuta. Esto es CVE-2021-42574 — el ataque Trojan Source. Un atacante...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 Según la National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 es vulnerable a ataques de Path Traversal y de ejecución remota de código. Path Traversal La vulnerabilidad de Path Traversal se introdujo debido al nuevo cambio de código añadido...

CVE-2021-42694

CVE-2021-42694 Este script implementa una herramienta de detección de homoglifos Homoglyph, utilizada principalmente para detectar posibles vulnerabilidades CVE-2021-42694 en el código. Permíteme explicar en detalle sus funciones principales: Funciones principales: Detección de ataques de...

CVE_2019_19844

djangocve201919844poc PoC para CVE-2019-19844 Configuración 1. docker-compose run --service-ports web python manage.py migrate --no-input 2. docker-compose run --service-ports web python manage.py createsuperuser [email protected] --username 0xsha 3. Dirígete a...

CVE-2026-101015

A flaw was found in OpenDMARC. A remote attacker can bypass Domain-based Message Authentication, Reporting, and Conformance DMARC policy checks by submitting domain names containing equivalent Unicode dot characters. Due to improper input validation in domain handling, the service fails to enforc...

Explotacion-CVE-2023-32315-Openfire

🔍 CVE-2023-32315 Descripción: La vulnerabilidad CVE-2023-32315 afecta a servidores Openfire, permitiendo a un atacante bypassear el login del panel administrativo web sin credenciales válidas. El exploit agrega un usuario administrativo, permitiendo al atacante cargar un plugin malicioso y obtene...

CVE-2026-100674

stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames with forbidden characters by submitting Unicode letters that transform into rejected characters. Attackers can bypass character allowlists and length limits to create...

CVE-2026-100674 stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization

stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames with forbidden characters by submitting Unicode letters that transform into rejected characters. Attackers can bypass character allowlists and length limits to create...

EUVD-2026-87768

stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames with forbidden characters by submitting Unicode letters that transform into rejected characters. Attackers can bypass character allowlists and length limits to create...

CVE-2026-100674 stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization

stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames with forbidden characters by submitting Unicode letters that transform into rejected characters. Attackers can bypass character allowlists and length limits to create...