CVE-2026-25049

🚨 CVE-2026-25049 – Divulgación de configuración no autenticada en n8n 📌 Resumen ID CVE: CVE-2026-25049 Software afectado: n8n Gravedad: Crítica Categoría: Control de acceso inadecuado / Divulgación de información Esta vulnerabilidad permite acceso no autenticado a datos de configuración internos ...

zip_smuggling

zipsmuggling Esta utilidad de Python crea archivos zip que contienen datos adicionales incrustados dentro de la estructura del archivo. Estos datos extra no son visibles/no se muestran cuando se examina o descomprime el zip, pero pueden recuperarse mediante powershell a través de un archivo de...

peeko

peeko Versión: v1.1 peeko es una herramienta C2 Comando y Control impulsada por XSS basada en navegador que aprovecha el navegador de la víctima como un proxy sigiloso dentro de redes internas. Mediante un payload XSS inyectado, peeko establece una conexión WebSocket a un servidor central, lo que...

CVE-2022-22965

CVE-2022-22965 又称 "Spring4Shell" 通过 JDK 9+ 上的 Data Binding 实现 Spring Framework RCE 漏洞 目的是尽可能集中目前关于该漏洞的公开信息，并能够知道在这种情况下应采取什么行动。 我的应用程序是否容易受到攻击？ 需要满足以下条件（AND）： JDK 9 + Apache Tomcat 作为 Servlet 容器 应用程序打包为 WAR 依赖 spring-webmvc 或 spring-webflux 我的应用程序是作为 Spring Boot 可执行 jar 构建的，它容易受到攻击吗？...

CVE-2021-21424

CVE-2021-21424 目录遍历与文件暴露 • CVE-2021-21424 • 描述：如果未在生产环境中禁用 WebProfiler，则会暴露服务器内部路径。 • 受影响版本：Symfony 2.8 到 5.x。 • 典型绕过方式：直接访问 /appdev.php/profiler/。 CVE-2021-21424 摘要 • CVE：2021-21424 • 组件：Web Profiler / Dev Toolbar • 影响：敏感信息泄露（环境、路径、参数） • 条件：/appdev.php、/profiler 或 /wdt 在生产环境中可访问。 •...

VMware vSphere - Server-Side Request Forgery

VMware vSphere HTML5 is susceptible to server-side request forgery due to improper validation of URLs in a vCenter Server plugin. An attacker with network access to port 443 can exploit this issue by sending a POST request to the plugin. This affects VMware vCenter Server 7.x before 7.0 U1c, 6.7...

Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery

Onair2 3.9.9.2 and KenthaRadio 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery. id: CVE-2021-24472 info...

Agentejo Cockpit < 0.11.2 - NoSQL Injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. The $eq operator matches documents where the value of a field equals the specified value. id: CVE-2020-35846 info: name: Agentejo Cockpit 0.11.2 - NoSQL Injection author: dwisiswant0 severity: critic...

Pallets Werkzeug <0.15.5 - Local File Inclusion

Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. id: CVE-2019-14322 info: name: Pallets Werkzeug 0.15.5 - Local File Inclusion author: madrobot severity: high description: | Pallets Werkzeug...

Riello Netman 204 - SQL Injection

The three endpoints /cgi-bin/dbdatalogw.cgi, /cgi-bin/dbeventlogw.cgi, and /cgi-bin/dbmultimetrw.cgi are vulnerable to SQL injection without prior authentication. This enables an attacker to modify the collected log data in an arbitrary way. id: CVE-2024-8877 info: name: Riello Netman 204 - SQL...

Joomla! JCK Editor SQL Injection

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter. id: CVE-2018-17254 info: name: Joomla! JCK Editor SQL Injection author: SumanKar severity: critical description: The JCK Editor component 6.4.4 for Joomla! allows SQL Injection vi...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

pfSense - Arbitrary File Write

diagroutes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

Apache Cocoon 2.1.12 - XML Injection

Apache Cocoon 2.1.12 contains an XML injection caused by parsing user-provided XML with external system entities in StreamGenerator, letting attackers access arbitrary files on the server, exploit requires sending malicious XML. id: CVE-2020-11991 info: name: Apache Cocoon 2.1.12 - XML Injection...

IncomCMS 2.0 - Arbitrary File Upload

IncomCMS 2.0 has a an insecure file upload vulnerability in modules/uploader/showcase/script.php. This allows unauthenticated attackers to upload files into the server. id: CVE-2020-29597 info: name: IncomCMS 2.0 - Arbitrary File Upload author: princechaddha severity: critical description: |...

WooCommerce Payments - Unauthorized Admin Access

An issue in WooCommerce Payments plugin for WordPress versions 5.6.1 and lower allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

EphemeralNet

EphemeralNet Una red P2P segura con Relay personalizado para NATs hostiles, construida en C++20. Olvido programable para almacenamiento peer-to-peer de alta seguridad. ¿Por qué EphemeralNet? Shardian diseña infraestructura para equipos que toman las garantías de eliminación tan en serio como la...

EUVD-2026-91136

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...