EUVD-2026-93957

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2016-6210-OpenSSH-User-Enumeration

Este repositorio no tiene un README...

CVE-2026-61797

CVE-2026-61797 — GLPI PDF Plugin Time-Based Blind SQL Injection Proof of Concept for CVE-2026-61797 , a time-based blind SQL Injection vulnerability affecting the GLPI PDF plugin. The vulnerability can be reached through: /marketplace/pdf/front/preference.form.php In the vulnerable implementation...

CVE-2017-5487

PoC - CVE-2017-5487 - Enumeración de Usuarios de WordPress vía REST Configuración git clone https://github.com/ndr-repo/CVE-2017-5487.git powershell -noexit -ExecutionPolicy Bypass -File .ps1 Uso .\Enumerate-WordPressOrgMembersREST.ps1 Ruta Alternativa 1 para Evadir WAF...

EUVD-2026-93786

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-23111

CVE-2026-23111 Auditor Linux Kernel nftables UAF This repository contains an automated audit script in Bash designed to deeply and accurately evaluate the CVE-2026-23111 vulnerability in Linux environments. 🔍 What is the CVE-2026-23111 vulnerability? CVE-2026-23111 is a Use-After-Free UAF...

CVE-2026-106104

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

CVE-2023-26083

CVE-2023-26083 – Fuga de direcciones del kernel de Mali GPU a través de Timeline Stream Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-26083 , una vulnerabilidad en el controlador de GPU Mali Arm Mali GPU Kernel Driver que permite a un usuario sin privilegios filtr...

CVE-2017-10797

CVE-2017-10797 CVE-2017-10797- Enumeración de usuarios en OwnCloud Server 8.1-10.0...

aisecplus-week01-servicenow-ai-security-incident

AISec Plus Week01 - Mapa de la Amenaza Investigación de Incidentes de Seguridad en IA: Vulnerabilidad del Virtual Agent de ServiceNow CVE-2025-12420 ¿Qué Ocurrió? Se descubrió una vulnerabilidad crítica en la plataforma de IA de ServiceNow que permitía a un atacante no autenticado hacerse pasar p...

CVE-2026-90271

A flaw was found in the Linux kernel's armmpam component. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS. The issue arises when a user unbinds a Memory System Component MSC after an error interrupt, causing a NULL pointer dereference...

CVE-2026-44848-PoC

CVE-2026-44848 — Portainer: Falta de autorización en los endpoints de plugins de Docker → RCE en el host Prueba de concepto de CVE-2026-44848 , una vulnerabilidad de falta de autenticación CWE-862 en Portainer que permite a un usuario no administrador con acceso al endpoint de Docker realizar...

CVE-2026-106105 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly applying owner-only...

CVE-2026-106105 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly applying owner-only...

CVE-2026-105868

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105846

Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an attacker can craft a redirect URL parameter that sends a guest user to an untrusted destination after the authentication flow completes. This...

CVE-2026-106104 Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

CVE-2026-106104 Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

CVE-2026-106104

The Quasar Framework (prior to version 2.23.3 ) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The Platform.parseSSR() function in ui/src/plugins/platform/Platform.js processes an unbounded User-Agent request header using browser-detection expressions that combine greedy captur...

CVE-2026-28766

CVE-2026-28766 Autenticación faltante: endpoint de cuenta de usuario Campo| Valor ---|--- CVE| CVE-2026-28766 Gravedad| Crítico 9.3 Vector CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Debilidad CWE| CWE-306: Autenticación faltante para función crítica Componentes afectados| Cloud API...