CVE-2025-57819

CVE-2025-57819 Resumen de esta vulnerabilidad citado de @jfinstrom aquí Alrededor del 2025-08-21, múltiples sistemas FreePBX comenzaron a mostrar errores y posteriormente se confirmaron compromisos. El proveedor Sangoma/Equipo de Seguridad de FreePBX publicó un aviso el 2025-08-26 instando a los...

CVE-2026-90561

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2026-90561 Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2026-90561 Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

pmg

Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use...

pmg

Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use...

TeamPass

Teampass Gestión de contraseñas autoalojada en la que todo tu equipo puede confiar Control de acceso por carpetas · cifrado AES-256-GCM autenticado · evidencia de cumplimiento Tus secretos nunca salen de tu infraestructura. 🌐teampass.net · 📖Documentación · 💬Discusiones · 🐳Docker Hub Contenido...

CVE-2026-59243

CVE-2026-59243 — Omisión de verificación de firma JWT en Apache Airflow FAB Auth Manager Coreano: README.ko.md Aviso de Apache: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl publicado el 2026-07-29 Registro CVE: https://vulners.com/cve/CVE-2026-59243 Corregido en:...

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit CVE-2025-0316 Exploit Toolkit 🚨 Auth Bypass Exploit for WordPress Plugin WP Directorybox Manager 🔥 Automated exploit script for CVE-2025-0316 — Auth Bypass via vulnerable AJAX action. ⚠️ Legal Notice This tool is intended strictly for: Research Red Team simulation Authorized...

CVE-2026-37071

CVE-2026-37071 Renombrado arbitrario de archivos que conduce a escalada de privilegios en la función Actions::renameFile de Veno File Manager Project 4.4.9 permite que un atacante autenticado con el permiso 'reanme' se apodere de la cuenta de superadministrador mediante una solicitud POST...

CVE-2026-37069

CVE-2026-37069 Divulgación de Ruta Absoluta en /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado conocer en qué directorio del sistema se está ejecutando el código de la aplicación enviando una petició...

CVE-2026-90493

A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking locally is a requirement. Internet...

EUVD-2026-76938

A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking locally is a requirement. The exploit ...

CVE-2026-90493 Tonec Internet Download Manager Kernel Driver idmwfp.sys access control

A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking locally is a requirement. Internet...

CVE-2026-90493

Tonec Internet Download Manager (up to 6.42 Build 63, Windows) contains an improper access control vulnerability in its kernel driver (idmwfp.sys). A local attacker with low privileges can exploit this to gain system-level access , as indicated by the changed scope and high impact across confiden...

CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File Write Path Traversal -orange 📋 Description CVE-2026-20262 is a Path Traversal CWE-22 vulnerability in the web interface of Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage. It allows an authenticated attacker with write permission...

PT-2026-90783

A high-severity vulnerability in the Tonec Internet Download Manager kernel driver enables local privilege escalation on Windows systems, with a public exploit already available and no vendor patch released. Key Points: CVE-2026-90493 is a high-severity improper access control flaw in the...

CVE-2026-37066

CVE-2026-37066 パストラバーサルにより任意ファイル読み取りが可能となる脆弱性が、/vfm-admin/index.php および /vfm-admin/ajax/streamvid.php に存在します。Veno File Manager Project 4.4.9 において、スーパー管理者権限を持つ認証済み攻撃者が、影響を受けるエンドポイントに対して特別に細工された2つのHTTPリクエスト（POSTおよびGET）を送信することで、機密情報を漏洩させる可能性があります。...

westone-CVE-2021-45232-scanner

westone-CVE-2021-45232-scanner Las versiones anteriores del panel de Apache APISIX 2.10.1 tienen una vulnerabilidad de seguridad en el acceso no autorizado. La API de Manager utiliza dos frameworks e introduce el framework droplet sobre la base del framework gin, todas las API y el middleware de...

CVE-2025-27558_Patching

CVE-2025-27558Patching Parche de la vulnerabilidad CVE-2025-27558 que había afectado a mi imagen de Linux. Incidente de Atlas: Conexión saliente inesperada 197.155.77.1 Esta carpeta documenta una anomalía de red real detectada en la máquina Atlas , un sistema Ubuntu monitoreado por Wazuh. Durante...