EUVD-2026-91123

The OpenAI-compatible file upload endpoint /v1/files in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write files to arbitrary locations outside the openaifiles directory by crafting malicious filenames...

EUVD-2026-91131

Devika v1.0 is vulnerable to Directory Traversal in the Coder.savecodetoproject function, which allows attackers to write files outside the intended project workspace...

EUVD-2026-91121

The /knowledgebase/uploadtempdocs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory...

CVE-2022-2602-Kernel-Exploit

CVE-2022-2602-Exploit-del-Kernel Detalles https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR La vulnerabilidad es un Use-After-Free que afecta la funcionalidad de descriptor de archivo registrado en el subsistema...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

CVE-2025-23247

CVE-2025-23247 Colaboración épica con @reubensammut : como siempre : Trabajo en curso para CVE-2025-23247. Por ahora solo un PoC de crash que muestra que controlamos el buffer y el offset, así que tenemos aaw. Bug de https://talosintelligence.com/vulnerabilityreports/TALOS-2025-2151 checksec...

CVE-2025-51529

CVE-2025-51529: Vulnerabilidad de DoS en el plugin WordPress Cookies and Content Security Policy El control de acceso incorrecto en la funcionalidad del endpoint AJAX en el plugin Cookies and Content Security Policy de jonkastonka hasta la versión 2.29 permite a atacantes remotos causar una...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing a intruder to write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing attackers to read and write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

Multiple Vulnerabilities in Dnsmasq (CVE-2026-4890, CVE-2026-4891, CVE-2026-42959, CVE-2026-4892, CVE-2026-4893)

Brocade is issuing a security advisory addressing multiple vulnerabilities identified in dnsmasq component used across affected products. These vulnerabilities range from memory corruption and heap-based out-of-bounds reads/writes to uncontrolled resource consumption leading to Denial of Service...

CVE-2024-21762

CVE-2024-21762 Escritura fuera de límites en Fortinet FortiOS — vulnerabilidad CVE-2024-21762 Exploit PoC por assetnote ssldohandshakeptr = b"%60%ce%42%00%00%00%00%00" getcwdptr = b"%70%62%2c%04%00%00%00%00" pivot1 = b"%52%f7%fd%00%00%00%00%00" push rdi; pop rsp; ret; pivot2 =...

Exch-CVE-2021-26855

Exch-CVE-2021-26855 ProxyLogon es el nombre genérico formal para CVE-2021-26855, una vulnerabilidad en Microsoft Exchange Server que permite a un atacante eludir la autenticación y hacerse pasar por el administrador. También hemos encadenado este error con otra vulnerabilidad de escritura...

CVE-2025-59342

CVE-2025-59342 - Path Traversal esm-dev Autor: Byte Reaper Descripción CVE-2025-59342 es una vulnerabilidad de path traversal en esm.sh, una red de entrega de contenido CDN nobuild para el desarrollo web moderno, en la versión 136 y anteriores. El problema existe en el manejo de la cabecera HTTP...

CVE-2021-26855

CVE-2021-26855 PoC de la cadena proxylogon SSRF CVE-2021-26855 para escribir archivo por testanull, censurado por github ¿Por qué github elimina este exploit porque está en contra de la política de uso aceptable, pero toneladas de otros exploits y frameworks de prueba de concepto están bien?...

Important: Red Hat Security Advisory: libpcap security update

An update for libpcap is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access

A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to re...

dirtyfrag

Dirty Frag: LPE universal de Linux Resumen Este documento describe la clase de vulnerabilidades Dirty Frag, descubierta y reportada por primera vez por Hyunwoo Kim @v4bel, que puede obtener privilegios de root en las principales distribuciones de Linux encadenando la vulnerabilidad xfrm-ESP...

CVE-2026-40369-EXPLOIT

Blog completo - https://pwn2nimron.com/blog CVE-2026-40369: Incremento de Dirección de Kernel Arbitrario a través de NtQuerySystemInformation Clase 253 Resumen Tipo: Escritura de kernel arbitraria incremento — PRIMITIVA DE ESCALACIÓN DE PRIVILEGIOS Componente: ntoskrnl.exe —...

dirtycow.cr

dirtycow Exploit CVE-2016-5195 Instalación Ve a la sección de releases o usa tu entorno de crystal. Uso dirtycow --target /path/to/root/file --string "string to write" --offset...

CVE-2025-4138-POC

CVE-2025-4138 - Bypass de PATHMAX en tarfile de Python PoC Autor: d3vn0mi / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Resumen Un exploit de prueba...