GO-2026-6506 CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns...

CLSA-2026-1790612973 TuxCare security update for org.springframework.data (4 CVEs)

TuxCare rebuilt 5 org.springframework.data packages to address 4 CVEs. Fixed in 3.4.8-tuxcare.1...

CVE-2026-98141

A flaw was found in the Linux kernel's NTFS file system driver. When an index insertion fails during a reparse data update, the driver ignores the error and returns success instead of propagating the failure. A local user creating symbolic links or special files can trigger this issue, causing fi...

CLSA-2026-1790610738 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.14.2-tuxcare.1...

CVE-2021-26258

Este repositorio contiene herramientas y archivos complementarios para la PoC de CVE-2021-26258. Consulte la entrada del blog para obtener detalles sobre la vulnerabilidad. Lista de archivos : rn.stg.original: archivo .stg original que viene con Intel Killer rn.xml.original: archivo .xml extraído...

CVE-2026-38751

CVE-2026-38751 — RCE mediante carga de módulos en OpenSTAManager RCE autenticado mediante carga de ZIP sin validar en el endpoint de actualización de módulos. Afectado: OpenSTAManager = 2.10.x Requisitos pip install requests Uso Reverse shell Penelope or any listener python3 exploit.py -u...

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorización faltante para la actualización arbitraria de opciones Suscriptor+ Descripción: El complemento InstaWP Connect – 1-click WP Staging & Migration para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de...

CVE-2026-93540 Fleet applies namespace labels and annotations without the bundle's service account privileges

A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options, the resulting namespace metadata update was not subject to the same authorization as the rest of the bundle's deployment. As a result, a...

nuc-winring0-fix

Controlador Vulnerable WinRing0 de Intel NUC - Guía de Eliminación Permanente Windows Defender marca OpenHardwareMonitorLib.sys controlador WinRing0 como VulnerableDriver:WinNT/Winring0 debido a CVE-2020-14979. Este controlador se incluye con el servicio NUC Software Studio de Intel y se reinstal...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.6: loki3.6-3.6.17-0.3.hum1 aarch64, x8664 loki3.6-canary-3.6.17-0.3.hum1 aarch64, x8664 loki3.6-logcli-3.6.17-0.3.hum1 aarch64, x8664 loki3.6-3.6.17-0.3.hum1.src src Security Fixes: loki3.6...

CLSA-2026-1790604941 TuxCare security update for postcss (6 CVEs)

TuxCare rebuilt postcss to address 6 CVEs. Fixed in 6.0.1-tuxcare.1...

CLSA-2026-1790604921 TuxCare security update for browserslist (1 CVE)

TuxCare rebuilt browserslist to address 1 CVE. Fixed in 1.7.7-tuxcare.1...

CLSA-2026-1790604852 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 0.4.0-tuxcare.1...

CLSA-2026-1790604779 TuxCare security update for multer (2 CVEs)

TuxCare rebuilt multer to address 2 CVEs. Fixed in 2.2.0-tuxcare.1...

CVE-2025-2266

🚨 CVE-2025-2266 — Exploit de Plugin de WordPress 🔍 Resumen de la Vulnerabilidad El plugin Checkout Mestres do WP for WooCommerce para WordPress está afectado por una vulnerabilidad de actualización de opciones arbitrarias sin autenticación en las versiones 8.6.5 hasta 8.7.5. La función vulnerable...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – Bypass de firma de actualización de firmware IoT mediante inyección de punto de orden bajo Resumen La verificación de firmware OTA de un dispositivo IoT utiliza una implementación Ed25519 defectuosa que no rechaza claves públicas con componentes de orden pequeño, lo que permite...

CLSA-2026-1790598013 TuxCare security update for markdown-it (1 CVE)

TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 13.0.2-tuxcare.2...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2016-3309_Reloaded

Estudio de Caso de Explotación del Kernel - Desbordamiento de Pool "Salvaje" en Win10 x64 RS2 CVE-2016-3309 Recargado Este repositorio de Github contiene exploits para la vulnerabilidad win32kfull!bFill recientemente parcheada. Ejecutar el exploit de Palette o de Bitmap te otorgará privilegios de...

WordPress Testimonials Widget plugin <= 4.0.4 - Unauthenticated Arbitrary Post Update vulnerability

Unauthenticated Arbitrary Post Update vulnerability discovered by Naiches in WordPress Plugin Testimonials Widget versions = 4.0.4...