CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 Vulnerabilidad crítica de ejecución remota de código en Microsoft SMBv1 📌 Resumen EternalBlue es una vulnerabilidad crítica en el protocolo Server Message Block versión 1 SMBv1 de Microsoft que permite a atacantes remotos ejecutar código arbitrario en sistemas Windows...

CVE-2026-78938

CVE-2026-78938 — Confusión de tipos en CheckMaps con migración de instancias en V8 TurboFan Análisis de causa raíz y exploit para CVE-2026-78938, una confusión de tipos en la eliminación de cargas de TurboFan en V8 que se corrigió en Chrome 152.0.7977.64 V8 15.2.124.18. El fallo se reportó como...

cve-2021-41773

Apache httpd RCE Se encontró una falla en un cambio realizado a la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal para asignar URLs a archivos fuera de los directorios configurados por directivas tipo Alias. Si los archivos fuera de estos...

CVE-2025-31161

🚨 CVE-2025-31161 - CrushFTP 中的严重认证绕过漏洞 CVE-2025-31161 是 CrushFTP（一种流行的托管文件传输（MFT）解决方案）中的一个严重认证绕过漏洞。 未经认证的远程攻击者可以利用 AWS4-HMAC-SHA256 授权头部处理中的缺陷，冒充任何已知用户（包括默认的 crushadmin 管理员账户）。 该漏洞已在 野外被积极利用 ，并被添加到 CISA 已知被利用漏洞（KEV）目录 中。 📊 漏洞详情 属性| 详情 ---|--- CVE ID| CVE-2025-31161 严重性| 严重（CVSS 9.8） 受影响版本| CrushF...

CVE-2026-5281

⚡ CVE-2026-5281 - Chrome Dawn WebGPU Use-After-Free This vulnerability affected one of the clients we provide services to. This repository is our contribution to the original research: a centralized starting point for the group, so that if a similar vulnerability affecting this component appears...

CVE-2026-20131

🚨 CVE-2026-20131 | RCE Crítico en Cisco FMC Ejecución Remota de Código no autenticada en Cisco Secure Firewall Management Center 📌 Resumen Una vulnerabilidad crítica de deserialización de Java previa a la autenticación que permite a atacantes remotos lograr ejecución de código a nivel de root en...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Vulnerabilidad de día cero de Path Traversal explotada en Apache HTTP Server Apache HTTP Server CVE-2021-41773 explotado activamente en ataques reales CVE-2021-42013: Path Traversal y ejecución remota de código en Apache HTTP Server 2.4.49 y 2.4.50 corrección...

CVE-2018-17456

CVE-2018-17456 1-day...

Astra Linux – Vulnerability in Firefox

An unexpected message in the WebGPU IPC framework could lead to a use-after-free error and an exploitable sandbox escape. There have been reports of attacks exploiting this flaw in real-world scenarios. This vulnerability affects Firefox versions earlier than 97.0.2, Firefox ESR versions earlier...

Exploit for CVE-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in G...

Exploit for Type Confusion in Google Chrome

CVE-2026-78938 — V8 TurboFan CheckMaps instance-migration type...

Exploit for CVE-2026-85046

CVE-2026-85046 Chrome Zero-Day Vulnerability Exploited in the...

Linux Distros Unpatched Vulnerability : CVE-2026-77806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Overview On July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as...

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range of products, including 57 that Microsoft marked as "critical." Microsoft notes that two of the vulnerabilities disclosed this month have been exploited in the wild. CVE-2026-5615...

Astra Linux – Vulnerability in qBittTorrent

All versions of the qBittorrent client up to 4.5.5 use default credentials when the web user interface is enabled. Administrators are not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and...

CVE-2026-7473 Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN Virtual Extensible LAN, decap-groups, or a GRE Generic Routing Encapsulation tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a...