CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Autorización faltante para actualización de opciones arbitrarias Suscriptor+ Descripción: El plugin WooODT Lite para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidades en la función...

sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Guía de parche manual de Mr.CIA para CVE-2025-32463 escalada de privilegios local en Sudo probada en Kali Linux y Ubuntu WSL. CVE-2025-32463 Guía de Parche de Sudo 🛡️ Vaya, CVE-2025-32463 es una desagradable vulnerabilidad de escalada de privilegios local CVSS 9.3 en Sudo...

CVE-2013-3900_Remediation_PowerShell

CVE-2013-3900RemediationPowerShell Script para realizar cambios en el registro para corregir CVE-2013-3900. Incluye una opción para deshacer los cambios en caso de que algo falle en su entorno. Pasos Descargue el script, ejecútelo con privilegios de administrador y reinicie el equipo...

CVE-2026-72898

Aviso sobre el comportamiento de Toucan2 y map sin :closed true...

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - Actualización arbitraria de opciones por Suscriptor+ Descripción El plugin de WordPress Content Mask anterior a la versión 1.8.4.1 no realiza comprobaciones de autorización y CSRF en varias acciones AJAX, y tampoco valida que la opción a actualizar pertenezca al...

CVE-2026-24061-payload

CVE-2026-24061 - Bypass de Autenticación por Inyección de Argumentos en telnetd de GNU InetUtils Las versiones 1.9.3 a 2.7 de GNU InetUtils son vulnerables a un bypass de autenticación remota en el servidor telnetd. El demonio telnetd no sanea adecuadamente la variable de entorno USER antes de...

CVE-2023-3124

CVE-2023-3124 Prueba de concepto de CVE-2023-3124 Este es un exploit de prueba de concepto PoC para CVE-2023-3124, una vulnerabilidad en el plugin Elementor Pro de WordPress. Descripción: El plugin Elementor Pro para WordPress es vulnerable a la modificación de datos no autorizada debido a una...

ghe-push-option-rce-scanner

CVE-2026-3854 — RCE en GitHub Enterprise Server mediante inyección de opciones de push Resumen Neutralización incorrecta de los valores de opciones de push en GHE. Un atacante con acceso de push consigue RCE en la instancia. Campo| Valor ---|--- CVE| CVE-2026-3854 Gravedad| CRÍTICA Producto| GitH...

CVE-2024-11848

CVE-2024-11848 NitroPack = 1.17.0 - Autorización faltante para actualización limitada de opciones con usuario autenticado Suscriptor+ Descripción El plugin NitroPack para WordPress es vulnerable a la modificación no autorizada de datos debido a una verificación de capacidad faltante en la acción...

EUVD-2026-87262

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's admin UI. When rendering the list of selected options, the option label is output as raw HTML without escaping. An...

CVE-2026-63216 Zammad: Stored XSS via unescaped option labels in the object attribute options context UI

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's admin UI. When rendering the list of selected options, the option label is output as raw HTML without escaping. An...

CVE-2026-63216 Zammad: Stored XSS via unescaped option labels in the object attribute options context UI

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's admin UI. When rendering the list of selected options, the option label is output as raw HTML without escaping. An...

UBUNTU-CVE-2026-91837

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...

CVE-2026-91837

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...

CVE-2026-91837 Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...

CVE-2026-91837

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...

CVE-2026-91837 Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...

AZL-104762 CVE-2026-98078 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization htonseq expects the host-order source first and the unaligned network-order destination second. The version 1 sync sender passes these arguments in reverse for both sequence blocks...

DEBIAN-CVE-2026-97615

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use option bits for CFM/MRP frame handlers CFM and MRP register a global brframetype whose hlistnode is linked into the per-bridge frametypelist when the first MEP/MRP instance is created. Enabling the protocol on...

CVE-2026-98078

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization htonseq expects the host-order source first and the unaligned network-order destination second. The version 1 sync sender passes these arguments in reverse for both sequence blocks...