wp_CVE-2020-35489_checker

wpCVE-2020-35489checker CVE-2020-35489 - Introducción El wpCVE-2020-35489checker es una herramienta de línea de comandos escrita en Python diseñada para comprobar si un sitio web WordPress es vulnerable a CVE-2020-35489. Esta vulnerabilidad en particular proviene de una falla de seguridad en el...

CVE-2026-70626

A flaw was found in NLTK. This vulnerability allows a local attacker to read arbitrary files outside of the intended directory. By placing symbolic links symlinks within the corpus root, an attacker can bypass path validation in the CorpusReader.open function, which does not properly account for...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 es una vulnerabilidad crítica de ejecución remota de código en Microsoft Outlook versiones que incluyen Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 antes del parche de febrero de 2024. Permite a un atacante no autenticado eludir la Vista Protegida de Outlook enviando un...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – Amplificación del handshake QUIC mediante la omisión de la validación de dirección Código del programa simulación en Python root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large...

CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: Escáner de RCE y Kit de Pruebas Seguras para 1Panel en Laboratorios CVE-2025-54424 es una vulnerabilidad relacionada con 1Panel que implica la elusión de certificados de cliente que podría causar...

CVE-2026-40465

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL or redirect parameter...

CVE-2026-40464

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Subscriber + Arbitrary Plugin Installation Description A lack of capability checks and insufficient nonce check on the AJAX action in the plugin, made it possible for authenticated users to install arbitrary plugins on vulnerabl...

CVE-2021-38583

CVE-2021-38583 Vulnerabilidad XSS Reflejado en openBaraza HCM HR Payroll v.3.1.6 openBaraza HCM HR Payroll v.3.1.6 no neutraliza adecuadamente la entrada controlable por el usuario, lo que permite una vulnerabilidad de Cross-Site Scripting XSS reflejado en múltiples páginas. https://openbaraza.or...

CVE-2024-6768

CVE-2024-6768: La validación incorrecta de la cantidad especificada en la entrada produce un estado irrecuperable en CLFS.sys causando un BSoD. Introducción: CVE-2024-6768 es una vulnerabilidad en el controlador del sistema de archivos de registro común CLFS.sys de Windows, causada por una...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

llm-council-vapt

LLM Council — VAPT Finding Validation A blind peer-review pipeline that validates a penetration-test finding before it reaches a client. Independent expert lenses assess the finding, blind-review each other, and a Chairman synthesizes one vetted verdict — is it worth reporting, and is the severit...

CVE-2021-38619

CVE-2021-38619 openBaraza HCM HR Payroll v.3.1.6 Vulnerabilidad de XSS almacenado no autenticado openBaraza HCM v.3.1.6 no neutraliza adecuadamente la entrada controlable por el usuario, lo que podría permitir que un atacante remoto no autenticado realice un ataque de cross-site scripting XSS...

EUVD-2026-68374

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL or redirect parameter...

CVE-2026-40465

Nokia NSP (Network Service Platform) is vulnerable to an open redirect caused by insufficient server-side validation of the URL or redirect parameter. An attacker can craft a malicious URL that redirects users to an untrusted destination, potentially facilitating phishing attacks. The CVSS 3.1 sc...

CVE-2026-40465 An Open Re-direct Vulnerability in Nokia NSP

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL or redirect parameter...

EUVD-2026-68373

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2026-40464

Nokia NSP contains a stored XSS vulnerability in its workflow application , caused by insufficient validation or encoding of user-controlled input. An authenticated attacker with access to the workflow application can embed malicious code that executes in another user's browser when they view the...