14672 matches found
CVE-2025-25163
CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - Descarga Arbitraria de Archivos Autenticada Suscriptor+ Descripción El plugin A/B Image Optimizer para WordPress es vulnerable a Directory Traversal en todas las versiones hasta la 3.3 inclusive. Esto permite a atacantes autenticados, con acceso d...
ubl-itel-s23
Desbloquear Bootloader — Itel S23 S665L / Unisoc T606 Guía para desbloquear el bootloader en el Itel S23 S665L usando el exploit CVE-2022-38694 en el chipset Unisoc T606 UMS9230. Información del Dispositivo Propiedad| Valor ---|--- Marca| Itel Modelo| S665L S23 Android| 12 SDK 31 Compilación|...
CVE-2020-14295
CVE-2020-14295 Vulnerability details - https://github.com/Cacti/cacti/issues/3622 Install pip3 install -r requirements.txt Usage root@kitploit: $ ./gimme-a-shell.py --help usage: gimme-a-shell.py -h -t Target -U Username -P Password -i Shell-IP -p Shell-Port optional arguments: -h, --help show th...
dns-zone-transfer-test
Prueba de Transferencia de Zona DNS Automatiza las pruebas de transferencia de zona del Sistema de Nombres de Dominio DNS. Encuentra automáticamente los servidores de nombres de un dominio dado y prueba las transferencias de zona; si tienen éxito, los registros A identificados se imprimen en la...
CVE-2026-14962
CVE-2026-14962 Wordpress Plugin ELEX WooCommerce Request a Quote unauthenticated SQL injection ELEX WooCommerce Request a Quote WordPress plugin elex-request-a-quote ≤ 2.4.0 — unauthenticated SQL injection via the public elexraqaddtoquote AJAX action. For authorized testing only. Do not run this...
NewPowerDNS
NewPowerDNS NewPowerDNS is an updated version of @domchell's PowerDNS. The main feature added is support for transferring files using DNS A records. See below for a complete list of the modifications made: Support for transfer over DNS A records Gzip compression to reduce file transfer size Suppo...
EUVD-2026-83376
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...
Scalar-Venom-Attack
This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...
fracture
Fractura FragAttacks Marco de Penetración WiFi CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture automatiza tres nuevas cadenas de ataque mediante inyección de tramas 802.11. Explota la vulnerabilidad de agregación A-MSDU en WPA2/WPA3 para inyectar tramas de texto plano arbitrarias en red...
PoC_CVE-2025-48507
Rompiendo TrustZone en Zynq UltraScale+ MPSoCs - Prueba de Concepto para CVE-2025-48507 y CVE-2025-0038 El Software No Seguro podría explotar CVE-2025-48507 y CVE-2025-0038 para obtener acceso de lectura/escritura al Mundo Seguro en plataformas Zynq UltraScale+ , rompiendo así el aislamiento de...
CVE-2026-79752
CakePHP , a rapid development framework for PHP, is affected by an SQL injection vulnerability in src/Database/FunctionsBuilder.php. The methods FunctionsBuilder::cast , ::extract , ::datePart , and ::dateAdd accept user-controlled dataType, part, or unit values and incorporate them into generate...
MAL-2026-16248 Malicious code in kartykgithub-takedown-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be4b64316a832dd3482cc41c21d79e2005d5984e2458ed45e957ee761862de31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kartykgithub-takedown-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be4b64316a832dd3482cc41c21d79e2005d5984e2458ed45e957ee761862de31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-92598
Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encoding international domain names, causing the domain resolver to compute a different Punycode A-label than standards-compliant parsers. Attackers can craft recipient addresses with invisible characters or compatibility mappings...
CVE-2026-92598
Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encoding international domain names, causing the domain resolver to compute a different Punycode A-label than standards-compliant parsers. Attackers can craft recipient addresses with invisible characters or compatibility mappings...
CVE-2026-84501
An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...
Astra Linux – Vulnerability in connman
ConnMan also known as Connection Manager versions 1.30 to 1.39 have a stack-based buffer overflow issue in the uncompress function of dnsproxy.c, occurring due to the use of NAME, RDATA, or RDLENGTH fields for the A or AAAA records...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: phy: It is now possible to allow the MDIO bus’s PM operations to initiate/stop the state machine for the phylink-controlled PHY. There are two types of DSA drivers: 1. Those that call dsaswitchsuspend and dsaswitchresume...