52074 matches found
MOVEit-CVE-2023-34362
MOVEit-CVE-2023-34362 Repositorio con todo lo que tengo para rastrear el impacto de MOVEit CVE-2023-34362 Incluye posibles organizaciones afectadas y dominios que utilizan métodos de descubrimiento de encabezado SFTP y cookies. También he creado un ticker de noticias que rastrea nuevas historias...
TFTPlunder
TFTPlunder: un exploit para CVE-2023-29930 Este es un script de exploit para una vulnerabilidad de lectura/escritura ciega de archivos en el servidor de aprovisionamiento TFTP de Genesys anteriormente InIn. Información sobre la vulnerabilidad Esta vulnerabilidad se debe a opciones de configuració...
WS_FTP-CVE-2023-40044
WSFTP-CVE-2023-40044 Repositorio con todo lo que tengo rastreando el impacto de WSFTP CVE-2023-40044 Incluye organizaciones y dominios posiblemente afectados que utilizan métodos de cabecera. También he creado un ticker de noticias que rastrea nuevas historias sobre MOVEit y WSFTP, disponible en...
LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...
Extreme Management Center 8.4.1.24 - Cross-Site Scripting
Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...
Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection
Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...
Juniper Web Device Manager - Cross-Site Scripting
Juniper Web Device Manager J-Web in Junos OS contains a cross-site scripting vulnerability. This can allow an unauthenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web, which can allow the attacker to steal...
GitLab CE/EE - Information Disclosure
GitLab CE/EE is susceptible to information disclosure. An attacker can access runner registration tokens using quick actions commands, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. Affected versions are from 12.10 before 14.6.5,...
Apache Flink 1.5.1 - Local File Inclusion
Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...
XWiki Platform - SQL Injection
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...
CVE-2024-36991
CVE-2024-36991: Path traversal que afecta a Splunk Enterprise en versiones de Windows inferiores a 9.2.2, 9.1.5 y 9.0.10. Herramienta CVEHunter para la detección y explotación de vulnerabilidades de CVE-2024-36991 con rendimiento asíncrono. Instalación root@kitploit: git clone...
CVE-2022-41040_Mitigation
descargue el script en la máquina afectada y ejecútelo...
CVE-2020-28022
CVE-2020-28022...
Vite - Arbitrary File Read
Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. @fs denies access to files outside of Vite serving allow list. Adding ?raw?? or ?import&raw?? to the URL bypasses this limitation and returns the file content if it...
CVE-2019-18634
CVE-2019-18634...
cvelistV5
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
CVE-2024-38639 QTS
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
CVE-2026-68070
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command...
