CVE-2026-75686: Improper Input Validation

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim...

ROS-20260922-73-0084

The vulnerability in Tomcat is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Security Advisory 0183

Security Advisory 0183 . CSAF PDF Date: September 22, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 22, 2026 | Initial release 1.1 | September 23, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-93952 CVSSv3.1 Base Score: 10.0...

Multiple vulnerabilities in Apache Tomcat in Foundation image

CVE-2026-55276 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090042 advisory. A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in...

Oracle Linux 10 : ELSA-2026-67166-0: / postgresql18-postgis (ELSA-2026-671660)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671660 advisory. 3.5.3-1.1 - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding Tenable has extracted the preceding description block directly from the...

CVE-2025-57819

CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution RCE CVE-2025-57819 is a critical Remote Code Execution RCE vulnerability affecting Sangoma FreePBX versions 15, 16, and 17. The vulnerability stems from insufficient sanitization of user-controlled input within vulnerable endpoints,...

CVE-2025-58360

CVE-2025-58360 From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity XXE vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap Exploit1: root@kitploit: python3 CVE-2025-58360 -u http://example.com...

CVE-2023-43144

CVE-2023-43144 Descripción Assets Management System 1.0 es vulnerable a inyección SQL a través del parámetro id en delete.php PoC root@kitploit: sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Revisión de código delete.php root@kitploit: ?php...

CVE-2020-10567

POC-CVE-2020-10567 POC de RCE - RESPONSIVE filemanager v.9.14.0. ¡No es la rama principal! ⚠️ Proyecto en GitHub: https://github.com/trippo/ResponsiveFilemanager Requisitos: No se requiere nada, este exploit no necesita autenticación. La aplicación Responsive Filemanager es una herramienta de...

CVE-2023-38890

CVE-2023-38890 Descripción Online Shopping Portal Project V3.1 permite a atacantes remotos ejecutar comandos/consultas SQL arbitrarios a través del formulario de inicio de sesión, lo que conduce a un acceso no autorizado y una posible manipulación de datos. Esta vulnerabilidad surge debido a una...

CVE-2024-36401-GeoServer-RCE

Vulnerabilidad RCE en GeoServer CVE-2024-36401 - script de detección CVE-2024-36401 es una vulnerabilidad de seguridad crítica que afecta a GeoServer, un servidor de código abierto para compartir datos geoespaciales, y a GeoTools, una biblioteca Java de código abierto que proporciona herramientas...

CVE-2023-4549

ID de CVE : CVE-2023-4549 Tipo de Vulnerabilidad : Cross-Site Scripting Descripción : El plugin DoLogin Security para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del encabezado 'X-Forwarded-For' en versiones hasta la 3.6 inclusive, debido a una insuficiente sanitización de...

CVE-2024-34831

Vulnerabilidad XSS CVE-2024-34831 en GibbonEdu Core v26.0.00 que conduce a escalada de privilegios Gibbon es un impresionante sistema de gestión escolar completo de código abierto. Se está invirtiendo mucho esfuerzo en renovar la antigua base de código. Autor: Christian Bajada 1. Vulnerabilidad E...

Moderate: Red Hat Security Advisory: libxml2 security, bug fix, and enhancement update

An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2023-49954.github.io

Inyección SQL en la Integración CRM de 3CX Para la integración CRM, 3CX incluye plantillas para conectarse a varias bases de datos. En estas plantillas, se utilizan marcadores de posición FirstName,SearchText,Email para completar las consultas. La entrada del usuario no está sanitizada y, por lo...

CVE-2022-4140

CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / local file read via response URL CVE-2026-13233 Untrusted upstream: the provider that fetched the URL its response told it to. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Coordinated disclosure complete...

CVE-2022-34962

OpenTeknik LLC OSSN RED SOCIAL DE CÓDIGO ABIERTO v6.3 LTS Explicación de la vulnerabilidad: Se descubrió que OpenTeknik LLC OSSN RED SOCIAL DE CÓDIGO ABIERTO v6.3 LTS contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del módulo Group Timeline. Vectores de ataque: El...

CVE-2020-14882

Gracias a NS-Sp4ce, Jas502n, s1kr10s, demon, 斯文 Referencias: https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and...