CVE-2026-89792 ksmbd: prevent out-of-bounds reads in share config responses

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC La vulnerabilidad en Langflow 1.8.1 y versiones anteriores permite a un atacante remoto no autenticado lograr la ejecución arbitraria de comandos en el host. Descripción El endpoint POST /api/v1/buildpublictmp/flowid/flow permite a cualquier persona construir flujo...

CVE-2026-27561

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27562

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27562 Command Injection via PUT in /api/iodd/config

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27562

CVE-2026-27562 is a command injection vulnerability in the /api/iodd/config endpoint. A remote attacker with admin-level credentials can send a crafted PUT request to execute arbitrary commands with root privileges on the affected device. The CVSS 3.1 score is 7.2 (HIGH) (AV:N/AC:L/PR:H/UI:N/S:U/...

CVE-2026-27562 Command Injection via PUT in /api/iodd/config

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device...

EUVD-2026-80245

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27561 Command Injection via GET in /api/iodd/config

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

EUVD-2026-80244

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27561 Command Injection via GET in /api/iodd/config

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27561

CVE-2026-27561 is a command injection vulnerability in the /api/iodd/config endpoint. A high-privileged remote attacker can exploit it by sending a crafted GET request with admin credentials , enabling execution of commands with root privileges on the affected device. The CNA is CERT-VDE , which ...

CVE-2026-88263

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

CVE-2026-88263

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

cve-2026-20127

Escáner CVE-2026-20127 Descripción general Este proyecto es una herramienta de escaneo de red basada en Windows, escrita en C++, que intenta identificar posibles servicios similares a Cisco SD-WAN / vManage y realizar una verificación de vulnerabilidad contra un problema referenciado etiquetado...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule Contiene una regla yara simple para buscar posibles archivos de configuración de KeePass comprometidos Cómo usar Use un escáner de reglas yara, como yara, loki o thor-lite para escanear sistemas con esta regla. La ubicación predeterminada del archivo de configuración...

poc-proxycommand-vulnerable

RCE mediante /.ssh/config inseguro El uso de tokens como %h, %p en ProxyCommand es bastante popular para utilizar túneles y proxy de conexión mediante SSH. Configuración vulnerable root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Nota: en mi evaluación...

[SECURITY] Fedora 43 Update: python-configargparse-1.7.7-1.fc43

A drop-in replacement for argparse that allows options to also be set via config files and/or environment variables. Applications with more than a handful of user-settable options are best configured through a combination of command line args, config files, hard-cod ed defaults, and in some cases...

CVE-2020-25498

CVE-2020-25498: XSS almacenado mediante CSRF en el router Beetel 777VR1 Descripción de la vulnerabilidad Se ha identificado que el endpoint vulnerable no tiene validación de entrada en el lado del servidor y carece de filtrado en el lado del cliente frente a cualquier inyección de script malicios...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 Corrección de PowerShell Este script de PowerShell corrige CVE-2021-36934, basado en el script original de Joran Slingerland https://github.com/JoranSlingerland https://github.com/JoranSlingerland/CVE-2021-36934/blob/main/CVE-2021-36934.ps1 El script de PowerShell ha...