vaas

Verdict-as-a-Service Verdict-as-a-Service VaaS es un servicio en la nube que proporciona capacidades para escanear archivos en busca de malware y otras amenazas. Le permite integrar fácilmente la detección de malware en su aplicación con unas pocas líneas de código. Puede utilizar VaaS para...

G Auto-Hyperlink <= 1.0.1 - SQL Injection

The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in a SQL statement, to select data to be displayed in the admin dashboard, leading to an authenticated SQL injection id: CVE-2021-24627 info: name: G Auto-Hyperlink = 1.0.1 - SQL...

CVE-2025-68001

CVE-2025-68001 El plugin g-FFL Checkout de WordPress 📡 Mantente a la vanguardia. Únete a @KNxploited en Telegram — tu fuente exclusiva de los últimos CVEs, zero-days e investigación de exploits de vanguardia. Actualizado constantemente. No es para todos. 📋 Resumen CVE-2025-68001 es una...

CVE-2024-40457-PoC

CVE-2024-40457-PoC CVE PoC 2024-40457 Ten cuidado con las banderas -g, revisa la imagen...

CVE-2025-12720

g-FFL Cockpit 'POST', 36: 'callback' = CLASS, 'handleenqueueonly', 37: 'permissioncallback' = fn = self::fflcockpitisallowedself::$fflckey, 38: ; La f...

CVE-2026-56111

CVE-2026-56111 - Escritura fuera de los límites en Marlin M421 Prueba de concepto para CVE-2026-56111 , una escritura fuera de los límites en el manejador de código G M421 de Marlin Firmware cuando se compila con MESHBEDLEVELING. Advisory:...

CVE-2025-12721

g-FFL Cockpit 'returntrue', haciéndolo completamente accesible para cualquier visitante no autenticado. Ubicado en class-sync-endpoint.php: 88: registerrestroute'fflcockpit/v1', '/serverstatus', 89: 'methods' = 'GET', 90: 'callback' = CLASS, 'handleserverstatus', 91: 'permissioncallback' =...

Logitech-G-Cloud-GhostLock-CVE-2026-43499

Logitech G Cloud · GhostLock CVE-2026-43499 Root Attempt Logitech G Cloud — CVE-2026-43499 GhostLock Root Attempt ⚠️ For research and defensive purposes only All content in this repository is generated by DeepSeek AI , for security research, vulnerability analysis, and defensive security assessmen...

@cotecna/stencil-components (>=3.0.0, <=3.2.1), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=6.0.0-nightly-20240307T150431.0, <=6.1.2)

@capacitor/ios NPM version =6.0.0-nightly-20240307T150431.0, =3.0.0, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

Exploit for CVE-2026-103956

abraxaslabs.tech · github.com/abraxas ·&...

PT-2026-104346

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument g name results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

CVE-2026-97520

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

CVE-2026-87167

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

EUVD-2026-79822

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127

CVE-2026-87127 affects the G-Invoicing component of Oracle Purchasing in Oracle E-Business Suite, versions 12.2.10 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP . Although the flaw resides in Oracle Purchasing, the changed scop...