CVE-2017-7529

Descripción de CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a un desbordamiento de enteros en el módulo range filter de nginx, lo que resulta en la filtración de información potencialmente sensible provocada por una solicitud especialmente diseñada...

westone-CVE-2021-21972-scanner

westone-CVE-2021-21972-scanner Vulnerabilidad de ejecución remota de código en VMware vCenter Server. Un atacante malicioso con acceso al puerto 443 puede enviar una solicitud cuidadosamente construida al vCenter Server, lo que eventualmente provocará la ejecución remota de código arbitrario...

CVE-2024-25169-Mezzanine-v6.0.0

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25169 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via crafted request. POC...

CVE-2006-20001

CVE-2006-20001 Una cabecera de solicitud If: cuidadosamente elaborada puede causar una lectura de memoria, o escritura de un solo byte cero, en una ubicación de memoria de pool montón más allá del valor de la cabecera enviado. Esto podría provocar la caída del proceso. Este problema afecta a Apac...

EUVD-2026-75760

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...

CVE-2026-86087

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...

CVE-2026-86087

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are affected by a vulnerability that allows an authenticated user to send a specially crafted request to write arbitrary files on the system. The CVSS v3.1 score is 4.3 (MEDIUM) with a network attack vector, low complexity, low priv...

CVE-2026-86087 IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...

CVE-2026-9338

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...

EUVD-2026-75676

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...

CVE-2026-9338

IBM WebSphere Application Server versions 9.0 (prior to 9.0.5.29) and 8.5 (prior to 8.5.5.31) are vulnerable to a denial of service triggered by a specially-crafted request that causes excessive resource consumption, potentially reducing service availability. The attack requires no authentication...

CVE-2025-11627

Envía una solicitud manipulada al manejador AJAX con el nonce extraído. root@kitploit: = // 1 find the inline script that contains the AJAX URL const s = ...document.scripts.findsc = sc.textContent.includes'billminozzijserrorcatched'; if !s console.error'Script with ajax URL not found. Is wphead...

httpd: NULL pointer dereference via specially crafted request

A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...

CVE-2026-23520

CVE-2026-23520 PoC de Ejecución Remota de Comandos RCE en la API MCP 📌 Descripción general Este repositorio contiene un PoC Prueba de Concepto de explotación para una vulnerabilidad de Ejecución Remota de Comandos RCE que afecta a aplicaciones que exponen un endpoint vulnerable de la API MCP...

CVE-2021-21402

CVE-2021-21402 Lectura arbitraria de archivos en Jellyfin Descripción de la vulnerabilidad Jellyfin es un sistema de software de medios libre que se utiliza para controlar y gestionar medios y streaming. Es una alternativa a Emby y Plex, que proporciona contenido multimedia desde un servidor...

CVE-2024-22889-Plone-v6.0.9

Product: Plone CMS Version: v6.0.9 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Control de Acceso Incorrecto CVE ID: CVE-2024-22889 Description: Debido a un control de acceso incorrecto en Plone versión v6.0.9, los atacantes remotos pueden ver y listar todos los archivos...

CVE-2026-26084

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...

CVE-2026-61410

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...

CVE-2026-61410

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...

PT-2026-86754

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...