283459 matches found
CVE-2026-102371 wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments
In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...
CVE-2023-41508
CVE-2023-41508 CVE-2023-41508 - Una contraseña codificada en el código de Super Store Finder v3.6 permite a los atacantes acceder al panel de administración. Tipo de vulnerabilidad Control de acceso incorrecto Proveedor del producto Super Store Finder Base de código del producto afectado Super...
CVE-2026-97597
A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 subsystem. A local unprivileged user can cause a Denial of Service DoS by repeatedly requesting leases for a shared network flow label. Because the kernel fails to enforce per-socket lease limits during label reuse, memory is...
CVE-2026-97599
A flaw was found in the Linux kernel's IEEE 802.15.4 hardware simulator driver. A lack of proper locking allows concurrent channel updates to race against each other when modifying simulated device configuration parameters. A local user could exploit this flaw to cause a double-free memory...
CVE-2026-97434
A flaw was found in the Linux kernel's dpaa2-switch network driver. During device removal, network packet polling instances NAPI shared across switch ports can be deleted before they are properly disabled. A local user with administrative privileges could trigger this issue during device teardown...
CVE-2026-93760
A flaw was found in Mongoid. This vulnerability allows a remote attacker, without requiring any credentials, to influence how the database evaluates queries by supplying malicious filter data. This can lead to the unintended disclosure of sensitive stored field values and may also result in reduc...
CVE-2021-3493-Exploit
CVE-2021-3493-Exploit Una prueba de concepto de escalada de privilegios local para CVE-2021-3493, escrita en C. 📌 Descripción Este repositorio contiene una implementación en C del exploit para CVE-2021-3493. Esta es una vulnerabilidad de Escalada de Privilegios Local LPE en la implementación de...
Zero-Day-Legacy
🎓 Proyecto de Graduación — Universidad Nacional de Ajloun UNA Facultad de TI · Ciberseguridad y Computación en la Nube · Año Académico 2026 🏆 Nota más alta de la universidad: 97% 📖 Descripción General Zero-Day Legacy es una máquina de laboratorio Boot-to-Root CTF Capture The Flag realista e...
CVE-2020-10135-BIAS
CVE-2020-10135-BIAS CVE 2020-10135, también conocido como BIAS Bluetooth Impersonation Attack Parece que después de un tiempo y de sortear algunos obstáculos, pude realizar el ataque BIAS Bluetooth Impersonation Attack CVE 2020-10135. Suplanté la conexión de un Samsung S3 Neo+ a un host Linux. Bu...
Moderate: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP6 security update
Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 6 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
httpd: mod_auth_digest: timing attack allows a bypass of digest authentication
A flaw was found in the modauthdigest module of httpd. A remote unauthenticated attacker can bypass digest authentication by measuring timing discrepancies of requests. This issue leads to unauthorized access to resources protected by digest authentication...
CVE-2025-4126
POC-CVE-2025-4126 Verificación de vulnerabilidad de ataque de reentrada en contratos inteligentes PoC de Ataque de Reentrada en Contratos Inteligentes Este repositorio contiene una Prueba de Concepto PoC que demuestra una vulnerabilidad de ataque de reentrada en contratos inteligentes de Ethereum...
CVE-2025-58440
CVE-2025-58440 Ejecución Remota de Código RCE mediante ataque de archivo políglota e inyección de byte nulo en Laravel FileManager Resumen Las versiones 2.11 del paquete unisharp/laravel-filemanager son vulnerables a Ejecución Remota de Código RCE debido a una validación inadecuada del tipo de...
CVE-2026-73599
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2026-102437
OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...
CVE-2026-102360 lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memory
A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...
EUVD-2026-88818
A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...
CVE-2026-78214 Apache DolphinScheduler: Actuator Endpoint Authentication Bypass via Percent-Encoded Paths
An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whether authentication is required by matching the incoming request path against protected Actuator paths. By sending a specially crafted request containing a percent-encoded path, a...
httpd: mod_auth_digest: timing attack allows a bypass of digest authentication
A flaw was found in the modauthdigest module of httpd. A remote unauthenticated attacker can bypass digest authentication by measuring timing discrepancies of requests. This issue leads to unauthorized access to resources protected by digest authentication...
Moderate: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP6 security update
Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 6 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...