CVE-2015-3073

CVE-2015-3073 Esta vulnerabilidad permite a atacantes remotos omitir las restricciones de la API en instalaciones vulnerables de Adobe Reader. Se requiere la interacción del usuario para explotar esta vulnerabilidad, ya que la víctima debe visitar una página maliciosa o abrir un archivo malicioso...

l2tp-socket-bug

CVE-2014-4943 La función PPPoL2TP en net/l2tp/l2tpppp.c en el kernel de Linux hasta 3.15.6 permite a los usuarios locales obtener privilegios aprovechando las diferencias de estructura de datos entre un socket l2tp y un socket inet. CVSS v2 Puntuación base: 6.9 MEDIO...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit Omisión de seguridad local de IPC La comunicación entre procesos a través de memoria compartida es un concepto donde dos o más procesos pueden acceder a la memoria común. Y la comunicación se realiza mediante esta memoria compartida, donde los cambios realizados por un...

CVE-2018-15473_exploit

CVE-2018-15473 - OPENSSH 7.7 ENUMERACIÓN DE USUARIOS dependencia: https://github.com/pyperanger/crypt-curve25519 Parche https://metacpan.org/pod/Net::SSH::Perl Referencias https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5...

CVE-2017-12542

CVE-2017-12542 Este script comprueba si un servidor HP iLO es vulnerable y puede agregar un usuario administrador...

CVE-2026-78310

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

EUVD-2026-85821

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78310

The software DIAEnergie (versions before 1.11.00.022 ) is vulnerable to an Authorization Bypass caused by a user-controlled key . While the specific technical root cause and component are not detailed in the provided documents, the vulnerability allows for unauthorized access. No specific exploit...

fortigate-cve-2022-40684-tool

Descripción Esta herramienta permite a los profesionales de seguridad identificar y validar la exposición al CVE-2022-40684 en dispositivos FortiGate mediante la interacción con endpoints expuestos de la API CMDB. Admite la enumeración de usuarios administrativos, grupos de usuarios y la extracci...

CVE-2026-93662

The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts' unpublished, pending or trashed event and venue content, including full street...

CVE-2026-88847

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...

CVE-2026-88845

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own accoun...

CVE-2026-82849

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

CVE-2026-82850

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is appli...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

EUVD-2026-85809

The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts' unpublished, pending or trashed event and venue content, including full street...

EUVD-2026-85804

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...

CVE-2026-88847

The MasterStudy LMS WordPress Plugin (versions before 3.7.50 ) is vulnerable to an authentication bypass flaw where it fails to verify if a user is enrolled in a course before recording lesson completions. This allows any authenticated user , such as a subscriber, to create unauthorized course pr...

EUVD-2026-85802

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own accoun...

CVE-2026-82850

The Masteriyo LMS WordPress plugin, prior to version 3.4.2 , fails to restrict access to quiz answer keys. This vulnerability allows any authenticated user , such as a student, to retrieve correct answers for any quiz on the site, even those in courses where they are not enrolled. The root cause ...