129320 matches found
CVE-2025-4322-Exploit
CVE-2025-4322 - Cambio de contraseña no verificado CWE-620 Exploit: Descargar aquí Detalles ID de CVE : CVE-2025-4322 Publicado : 05/20/2025 Impacto : Crítico CVSS : 9.8 Parche disponible: Aún no hay parche oficial Impacto Vulnerabilidad de gravedad crítica que permite a los atacantes...
gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
CVE-2023-25136
CVE-2023-25136 OpenSSH 9.1 Vulnerability Mass Scanning and Exploitation Vulnerability Details OpenSSH is software that implements the SSH protocol, commonly used to securely connect to Linux or Windows machines for remote administration. The CVE-2023-25136 security vulnerability introduced in...
clone_and_pwn
Headers Exploit Title: Clone and Pwn Date: June 4th, 2018 Exploit Author: Alejandro Caceres Vendor Homepage: https://git-scm.com/ Software Link: https://git-scm.com/downloads Version: arbitrary code is executed on git client versions In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15....
Python-CVE-2020-25213
Python-CVE-2020-25213 Exploit interactivo en Python para la vulnerabilidad de WP File Manager. El plugin File Manager wp-file-manager anterior a la versión 6.9 de WordPress permite a atacantes remotos subir y ejecutar código PHP arbitrario porque renombra un archivo de conector de ejemplo de...
postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()
A flaw was found in PostgreSQL. An object creator can exploit a type confusion vulnerability in the pgrestoreattributestats function. This flaw occurs due to the conflation of range and multirange values, allowing the attacker to execute arbitrary code as the operating system user running the...
postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...
Remediate-AdobeAcrobat-CVE-2026-34621
Intune Proactive Remediation – Aplicación de versión de Adobe Acrobat/Reader CVE-2026-34621 Este repositorio contiene scripts de Proactive Remediation de Microsoft Intune para reducir la exposición a vulnerabilidades de Adobe Acrobat/Reader mediante: 1. Aplicar una versión mínima parcheada detect...
CVE-2023-40031
CVE-2023-40031 Análisis y reproducción de la vulnerabilidad de desbordamiento de búfer en el montón de Notepad++ CVE-2023-40031 Resumen de la vulnerabilidad Notepad++ es un conocido editor de código abierto para Windows que admite múltiples lenguajes de programación. Recientemente, investigadores...
CVE-2022-24934
CVE-2022-24934 Resumen de la vulnerabilidad El programa de actualización de WPS Office, wpsupdate.exe, lee una dirección de servidor de actualización personalizada del registro HKEYCURRENTUSER, descarga un programa de actualización personalizado y lo ejecuta, lo que provoca la ejecución de código...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation
A flaw was found in the Linux kernel's userfaultfd mechanism. A local attacker with userfaultfd access could register on shadow stack Virtual Memory Areas VMAs. By discarding a page and injecting a page with chosen return addresses, an attacker could achieve arbitrary code execution. This...
CVE-2025-55349
CVE-2025-55349 — Ejecución de código arbitrario en pm2 mediante postinstall Descubridor : Golden Ticket Labs Proveedor : Unitech pm2 Fecha de asignación : 20 de agosto de 2025 MITRE Descripción Un problema en el componente lib/API/Modules/NPM.js de Unitech PM2 v5.4.2 permite la ejecución de códig...
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()
A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...
kernel: ipv6: fix possible UAF in icmpv6_rcv()
A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...
Log4shell
Informe de análisis Log4Shell de Igloo Corporation, Won Chi-hyun Log4shell CVE-2021-44228 Log4j es un registro gratuito y de código abierto de la Apache Software Foundation, basado en Java y aplicable a todas las aplicaciones. Registra los logs de diversos servicios basados en Java y proporciona...
EUVD-2026-80049
A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...
EUVD-2026-80033
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...