CVE-2024-3553

CVE-2024-3553 Tutor LMS = 2.6.2 - Autorización faltante para actualización limitada de opciones no autenticada El plugin Tutor LMS – eLearning and online course solution para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidades en la...

react2shell

React2Shell Vulnerability Checker CVE-2025-55182 Herramienta de detección para Ubuntu Linux y Windows 10/11 Descripción Esta herramienta detecta posibles vulnerabilidades React2Shell CVE-2025-55182 en proyectos de React verificando: Archivos package.json y archivos de bloqueo para paquetes...

ai-code-review

🔍 codereview Revisión de código impulsada por IA en tu terminal. Un comando. Comentarios instantáneos. Detecta vulnerabilidades de seguridad, errores y malas prácticas antes de que lleguen a producción. Instalación · Inicio rápido · Uso · Proveedores · Contribuir Qué hace codereview envía tu códi...

Reachability-Check

Comprobación de Accesibilidad 🌐 ES | TR Comprobador de accesibilidad basado en navegador: pruebe la conectividad de red, las reglas del firewall y las restricciones de acceso. Archivo HTML único. Cero dependencias. No se requiere servidor web para ejecutarlo. Características Medición dual: HTTP...

CVE-2021-4044

Script de verificación SSL Este repositorio contiene un script en Python que verifica la versión de OpenSSL en su sistema y prueba las conexiones SSL/TLS a un sitio web proporcionado por el usuario. El script está diseñado para identificar si el sistema está afectado por CVE-2021-4044 y para prob...

cve-2013-3900-winverifytrust-mitigation

Mitigación de CVE-2013-3900 WinVerifyTrust / EnableCertPaddingCheck Este repositorio contiene un script de PowerShell de remediación y verificación que aborda el hallazgo de Tenable/Nessus: ID de Plugin: 166555 Nombre: Mitigación de Validación de Firma WinVerifyTrust CVE-2013-3900...

CVE-2026-87669

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

CVE-2026-87669

Brocade Fabric OS versions before 10.0.1 are susceptible to a missing authorization check in the REST API interface. This vulnerability allows an authenticated user, regardless of their role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data a...

CVE-2026-87669

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

EUVD-2026-94673

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

CLEANSTART-2026-YK34202 Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check

CVE-2026-59739 affects multiple packages. Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. See references for individual vulnerability details...

CLEANSTART-2026-OR76615 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

PT-2026-108248

Name of the Vulnerable Software and Affected Versions fast-jwt versions prior to 6.3.4 Description An expiration-check bypass exists when caching is enabled. The createVerifier cache may continue accepting a signed JSON Web Token JWT after its expiration time if the token contains an exp expirati...

CVE-2026-106573

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and...

PT-2026-107782

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

PT-2026-108035

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls open of libavformat/tls mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted...

PT-2026-107975

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers can supply a crafted MVG image that triggers a long-running decoding operation, consuming excessive CPU resources and stalling image...

UBUNTU-CVE-2026-106573

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and...

CVE-2026-107352

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata AWS account identifiers and SQL statement text from other AWS accounts. Query results, credentials, and Amazon S3 data were not affected. AWS...

netty-resolver-dns-check

netty-resolver-dns-check Offline checker for three DNS cache poisoning CVEs in io.netty:netty-resolver-dns — CVE-2026-45674 , CVE-2026-47691 and CVE-2026-45673 — and for the question the version number cannot answer: is your application actually using that resolver? If you use Spring WebClient, t...