570 matches found
CVE-2026-23744
CVE-2026-23744 MCPJam inspector Ejecución remota de código: Uso de la prueba de concepto POC: root@kitploit: python3 cve-2026-23744.py --target https:// --att-ip --att-p...
EUVD-2026-70794
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-70793
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...
PT-2026-85313
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...
wazuh-home-soc
SOC en casa: Laboratorio de detección de amenazas con Wazuh + Suricata Un laboratorio de Centro de Operaciones de Seguridad autogestionado, diseñado para detectar técnicas de ataque reales contra un objetivo deliberadamente vulnerable, usando Wazuh como SIEM y Suricata como sensor IDS basado en...
Juniper J-Web - Remote Code Execution
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...
CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates
CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates A critical RCE vulnerability in Windows TCP/IP stack CVE-2025-26686 leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now By Mark Mallia Type: Remote Code...
VulnCheck KEV: CVE-2026-63520
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
Access Control Bypass
Overview org.springframework.security:spring-security-core is a package that provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to Access Control Bypass in the InetAddressMatchers process. An attacker can bypass network-based access control...
CVE-2026-62515
Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Orac...
dotnet: .NET Core: Denial of Service via type confusion
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service DoS over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users...
dotnet: .NET Framework: Denial of Service via network-based buffer overflow
A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service DoS, making the affected system unavailable to legitimate users...
dotnet: .NET Framework: Denial of Service via improper input validation
A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service DoS condition, making the affected system unavailable to legitimate users...
CVE-2026-50527
A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service DoS, making the affected system unavailable to legitimate users...
CVE-2026-47302
A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service DoS condition. The lack of limits or throttling mechanisms enables an...
ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm
A flaw was found in ASP.NET Core. An authorized attacker can exploit an incorrect implementation of the authentication algorithm over a network. This vulnerability allows the attacker to elevate their privileges, potentially gaining unauthorized access to sensitive resources or performing actions...
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
EUVD-2026-42716
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to an incorrect initialization, a process which should only be able to communicate internall...
CVE-2026-57054 Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs
A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable. If an MX Series device is...