CVE-2026-58257

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...

CVE-2026-58256

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as ldapfilter, poisoning /personnalisation/configldap.inc.php and permitting remote code...

CVE-2026-58205

GRR is a resource management and reservation application. Prior to version 4.5.0, maj.php reflects the forcemaj parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a URL that executes arbitrary JavaScript in...

CVE-2026-58257 GRR vulnerable to Arbitrary File Read and Deletion

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...

CVE-2026-58257

The GRR resource management and reservation application is vulnerable to Arbitrary File Read and Deletion prior to version 4.5.0 . The root cause is a failure to validate or enforce file paths within the database restoration feature . An attacker with administrator privileges can manipulate input...

EUVD-2026-111410

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...

CVE-2026-58256

The resource management and reservation application GRR is vulnerable to Remote Code Execution (RCE) via PHP code injection in versions prior to 4.5.0 . An administrator can inject malicious PHP by using LDAP connector configuration parameters, such as ldap_filter, to poison the /personnalisation...

EUVD-2026-111409

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as ldapfilter, poisoning /personnalisation/configldap.inc.php and permitting remote code...

CVE-2026-58256 GRR vulnerable to Remote Code Execution Via PHP Code Injection

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as ldapfilter, poisoning /personnalisation/configldap.inc.php and permitting remote code...

CVE-2026-58205 GRR has a Reflected XSS issue

GRR is a resource management and reservation application. Prior to version 4.5.0, maj.php reflects the forcemaj parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a URL that executes arbitrary JavaScript in...

EUVD-2026-111407

GRR is a resource management and reservation application. Prior to version 4.5.0, maj.php reflects the forcemaj parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a URL that executes arbitrary JavaScript in...

CVE-2026-58205

The resource management and reservation application GRR is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 4.5.0 . The issue exists in the maj.php component, where the forcemaj parameter is reflected without adequate escaping if installation files remain accessible. An att...

grr

GRR Rapid Response es un marco de respuesta a incidentes centrado en la informática forense en vivo remota. GRR es un cliente python agente que se instala en los sistemas objetivo, y una infraestructura de servidor python que puede gestionar y comunicarse con los clientes. Documentación Visite...

rekall

Descontinuación de Rekall Este proyecto ya no tiene mantenimiento. En diciembre de 2011, se creó una nueva rama dentro del proyecto Volatility para explorar cómo hacer que la base de código sea más modular, mejorar el rendimiento y aumentar la usabilidad. Esta rama luego se bifurcó para convertir...

CVE-2026-30711

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent...

EUVD-2026-13111

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent...

CVE-2026-30711

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent...

CVE-2026-30711: Improper Neutralization of Special Elements used in an SQL Command

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent...

CVE-2026-30711

Devome GRR v4.5.0 contains multiple authenticated SQL injection vulnerabilities within the include/session.inc.php file. The root cause is the insufficient validation of the referer and user-agent parameters, which can be exploited by an authenticated user to perform SQL injection attacks. While ...

CVE-2026-30711

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent...