CVE-2026-105816

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2024-48990

CVE-2024-48990 Exploit para CVE-2024-48990 Escalada de privilegios local en needrestart 3.8 Antecedentes Lee https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart. Qualys hace un gran trabajo...

CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

[SECURITY] [DSA 6549-1] xz-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6549-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 07, 2026 https://www.debian.org/security/faq -...

jscythe

jscythe 滥用 Node.js 的检查器机制，以强制任何基于 Node.js/Electron/v8 的进程执行任意 JavaScript 代码，即使其调试功能已被禁用。 已在 Visual Studio Code、Discord、任何 Node.js 应用程序等环境中测试并运行！ 使用方法 1. 定位目标进程。 2. 向进程发送 SIGUSR1 信号，这将在某个端口上启用调试器（具体端口取决于软件，有时是随机的，有时是固定的）。 3. 通过对比发送 SIGUSR1 前后的开放端口差异，确定调试端口。 4. 从 http://localhost:/json 获取 WebSocket...

CVE-2019-7609

CVE-2019-7609 Las versiones de Kibana anteriores a 5.6.15 y 6.6.1 contienen una falla de ejecución de código arbitrario en el visualizador Timelion. Un atacante con acceso a la aplicación Timelion podría enviar una solicitud que intente ejecutar código JavaScript. Esto podría llevar a que un...

EUVD-2026-92767

Ghost: Remote Code Execution via Theme Translation Files...

GHSA-5JJJ-9XC3-RM56 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Summary hydra-optuna-sweeper accepted a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolved it with the lower-level hydra.utils.getmethod API, and later invoked the returned callable. Hydra's object-lookup helpers intentionally trust their input and do not apply the...

cloudpanel-2.4.2-CVE-2024-44765-recovery

CVE-2024-44765 es una vulnerabilidad de Autorización Incorrecta Configuración Incorrecta de Control de Acceso en las versiones 2.0.0 a 2.4.2 de CloudPanel de MGT-COMMERCE GmbH 1. Siga las instrucciones en cada carpeta esto debe hacerse localmente 2. Restablecer contraseñas y accesos para root $...

CVE-2026-78030

A flaw was found in Perl DBI's bundled DBD::DBM driver. This vulnerability allows arbitrary code execution because unvalidated connection attributes, such as dbmtype and dbmmldbm, are passed directly to Perl's module loader without verification. An attacker who can influence database connection...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC Detalles de CVE-2025-0411 "Esta vulnerabilidad Puntuación CVSS: 7.0 permite a atacantes remotos eludir el mecanismo de protección Mark-of-the-Web en instalaciones afectadas de 7-Zip. Se requiere la interacción del usuario para explotar esta vulnerabilidad, ya que la víctim...

CVE-2026-106441

A flaw was found in hydra-core. An attacker who supplies or controls a malicious logging configuration can trigger arbitrary code execution by specifying unauthorized Python classes or factory functions. Because Hydra passes logging configuration directly to Python's logging system without...

CVE-2026-42616

A flaw was found in NTFS-3G. An attacker can trigger a heap buffer overflow in the ntfscat utility by providing a specially crafted NTFS filesystem image. When the utility attempts to read a file from the malicious image, heap memory is corrupted, which can lead to a Denial of Service DoS crash o...

CVE-2020-24972

Entonces CVE-2020-24972 se deriva de otro CVE en realidad. No recuerdo el CVE que se designó, pero tiene que ver con la opción de línea de comandos platformpluginpath de Qt. En esencia, el problema proviene del uso de Qt, específicamente la opción platformpluginpath. "Este parámetro debe contener...

Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System

Summary Multiple vulnerabilities affect IBM Cloud Pak System. These vulnerabilties have been addressed with IBM Cloud Pak System 2.3.5.1. Vulnerability Details CVEID:CVE-2025-15467 DESCRIPTION: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD...

CVE-2023-30547

CVE-2023-30547 Descripción de la vulnerabilidad vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node en lista blanca. Existe una vulnerabilidad en la sanitización de excepciones de vm2 para versiones hasta la 3.9.16, que permite a los atacantes lanzar una...

EUVD-2026-93665

Hydra instantiate target blacklist bypasses permit code execution...

CVE-2026-106442

A flaw was found in hydra-core. The instantiate mechanism does not properly validate callable targets against its blocklist, allowing execution wrappers and deferred calls to bypass authorization checks. An attacker who convinces an application or user to process untrusted configuration files can...