SUSE-SU-2026:4458-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

Codiad-CVE-2018-14009

instalar codiad @ git clone https://github.com/Codiad/Codiad.git Pasos para la reproducción 1. Configurar un entorno vulnerable en un servidor Ubuntu con Codiad 2.8.4 última versión @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git...

CVE-2026-31802

🛡️ CVE-2026-31802 - Visor Simple de Prueba de Concepto 📋 Acerca de CVE-2026-31802 Este repositorio proporciona una prueba de concepto PoC y un informe detallado para CVE-2026-31802. El problema es una vulnerabilidad de seguridad en el paquete npm tar. Permite a los atacantes engañar al software...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 es una vulnerabilidad en el módulo tarfile de Python que permite escrituras arbitrarias de archivos fuera del directorio de extracción al extraer archivos tar no confiables. El problema ocurre al usar TarFile.extract o TarFile.extractall con filter="data" o...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 y CVE-2025-71260 Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Herramienta Generadora de Artefactos de Detección de la Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Descripción Este Generador de Artefactos de Detección verifica si l...

varlib-cve-2025-66034

Exploit de fontTools varLib CVE-2025-66034 Este repositorio no introduce una nueva vulnerabilidad. Este es un exploit de prueba de concepto para CVE-2025-66034 que afecta al pipeline de generación de fuentes variables varLib de fontTools. La vulnerabilidad permite a los atacantes controlar el...

CVE-2026-19185

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-103511

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103507

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2020-1206

In the SMBGhost vulnerability CVE-2020-0796 I talked about a write-what-where primitive technique through the use of an integer overflow bug to change the pointer Alloc.Userbuffer to point to an address we desire and write arbitrary data into it. Similar to SMB Ghost, this vulnerability also exis...

CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box

CVE-2026-2796 + CVE-2026-2768 — Escapa de la caja de Wasm Investigación sobre explotación de Firefox de cadena completa: una confusión de tipos en WebAssembly para ejecución de código en el renderer , encadenada hacia un bug del proceso padre para un escape del sandbox. Ambos bugs se corrigieron ...

CVE-2026-103511

Prior to version 2026.4.2 , Perforce P4 Search is vulnerable to an arbitrary file-write flaw. The software fails to validate file names provided to its extension installation feature . An attacker possessing super-user or service-token privileges can exploit this to write files containing arbitra...

EUVD-2026-92311

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103511 Arbitrary file-write via extension installation in P4Search

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103511 Arbitrary file-write via extension installation in P4Search

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2017-1000117

Repositorio PoC para CVE-2017-1000117 de VulApps Bifurcado desde joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git escribirá la salida de id en un archivo vul en /var/www/html. Ver más en VulApps...

CVE-2026-31431_je_sappelle_RoOt

CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Objetivo del repositorio Este repositorio documenta la vulnerabilidad CVE-2026-31431 , apodada Copy Fail , y propone un procedimiento de remediación defensiva para sistemas Linux potencialmente expuestos. ⚠️ Este repositorio está estrictamente...

CVE-2026-103507 Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

EUVD-2026-92299

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-103507 Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...