209116 matches found
EUVD-2026-93373
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...
CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...
CVE-2026-56596
The HCL BigFix Service Management software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to provide malformed or unexpected data, potentially leading to processing errors , business logic bypasses , and unintended application behavior . The ...
HG532d-RCE-Exploit
Exploit RCE HG532d Resumen Un exploit de Ejecución Remota de Código RCE basado en la vulnerabilidad CVE-2017-17215. Modificado del código PoC original de exploit-db.com para funcionar en los Routers de Pasarela Doméstica Huawei HG532d. Descripción Este exploit RCE se basa en CVE-2017-17215 que...
CVE-2026-40564
CVE-2026-40564: SSRF a través de FlinkSessionJob.spec.job.jarURI en flink-kubernetes-operator El operador Apache Flink Kubernetes no verifica el campo spec.job.jarURI en los recursos FlinkSessionJob o FlinkDeployment. Cualquier persona que pueda crear uno de esos recursos puede establecer jarURI ...
Blackash-CVE-2025-48593
🚨 CVE-2025-48593 Ejecución Remota de Código Zero-Click en el Sistema Android 🚨 "Un solo paquete malicioso puede tomar control de tu dispositivo." — Equipo de Seguridad de Android, Noviembre de 2025 🎯 Resumen de la Vulnerabilidad Atributo| Detalles ---|--- CVE ID| CVE-2025-48593 Gravedad| 🔴 Crític...
CVE-2018-7600-PoC
SAWPOC — CVE-2018-7600 A Python Proof of Concept for CVE-2018-7600 , also known as Drupalgeddon2. CVE-2018-7600 is a critical vulnerability affecting certain versions of Drupal 7. Under vulnerable configurations, an unauthenticated attacker may be able to inject malicious input and achieve remote...
CVE20265172poc
CVE20265172poc CVE-2026-5172: buffer overflow in extractaddresses on crafted resource record PoC Topology read here https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps 1. vi /etc/dnsmasq.conf port=5353...
CVE-2026-98206
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy length into responsebuf, which is CYMAXINPUT bytes...
UBUNTU-CVE-2026-98206
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy length into responsebuf, which is CYMAXINPUT bytes...
UBUNTU-CVE-2026-98205
In the Linux kernel, the following vulnerability has been resolved: Input: evdev - zero absinfo before partial copy in EVIOCSABS The EVIOCSABS handler copies at most the user supplied ioctl size into an uninitialized on-stack struct inputabsinfo: if copyfromuser&abs, p, mintsizet, size,...
CVE-2026-98229
In the Linux kernel, the following vulnerability has been resolved: xfrm: save input state data before secpath resets xfrminput stores the current xfrmstate in the skb secpath while it continues receive-side processing. Some input paths can reset that secpath before xfrminput has finished...
CVE-2026-105879 WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2...
CVE-2026-105879 WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2...
CVE-2026-103346 WordPress Payflex Payment Gateway plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gateway: from n/a through 2.7.1...
cve-2026-58138
CVE-2026-58138: RCE no autenticado en Conductor Kit de reproducción para CVE-2026-58138, una vulnerabilidad de inyección de código con CVSS 9.8 en Conductor. Contiene la regla de OpenTaint y las aproximaciones de GraalVM, pruebas de reglas aisladas, el resultado del escaneo y un exploit funcional...
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers...
CVE-2026-52658
CVE-2026-52658 — AureusERP Stored XSS Chatter Change-Tracking CWE-79 · CVSS 8.7 High · AureusERP ≤ v1.4.0 / master Chatter renders the change-tracking oldvalue / newvalue fields as raw HTML !! !!, no sanitization. An authenticated user editing a record stores JavaScript that fires for every viewe...