111528 matches found
The vulnerability of the derive() function in the modules openssl/src/derive.rs and openssl/src/pkey_ctx.rs of the OpenSSL library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the derive function in the modules openssl/src/derive.rs and openssl/src/pkeyctx.rs of the OpenSSL library is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
UBUNTU-CVE-2026-93566
A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control characters within the chunk-size line. This bypasses the intended strict validation, allowing the attacker to inject arbitrary HTTP requests. This vulnerability can le...
ROS-20260921-73-0093
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0084
The vulnerability involves bypassing authentication through spoofing. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...
ROS-20260921-73-0081
The vulnerability is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260921-73-0013
The vulnerability in ElasticSearch is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0128
The vulnerability in Golang is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0131
The vulnerability in Golang is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0041
The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2002-0346
CVE-2002-0346 Vulnerabilidad de cross-site scripting en Cobalt RAQ 4 permite a atacantes remotos ejecutar script arbitrario como otros usuarios de Cobalt mediante Javascript en una URL hacia 1 service.cgi o 2 alert.cgi. Publicación de Packetstorm en...
CVE-2018-10933
POC de CVE-2018-10933 Se encontró una vulnerabilidad en la máquina de estados del lado del servidor de libssh antes de las versiones 0.7.6 y 0.8.4. Un cliente malicioso podría crear canales sin realizar primero la autenticación, lo que resulta en un acceso no autorizado. Uso : root@kitploit:...
CVE-2023-43147
CVE-2023-43147 Vendedor: PHPJabbers Página web del vendedor: https://www.phpjabbers.com/ Enlace del software: https://www.phpjabbers.com/limo-booking-software Versión: 1.0 Probado en: Windows 10 Pro Impacto: Agregar un usuario atacante con privilegios de administrador CVE: La vulnerabilidad de...
CVE-2024-50968
CVE-2024-50968 Descripción Existe una vulnerabilidad de lógica de negocio en la función Añadir al Carrito de itsourcecode Agri-Trading Online Shopping System 1.0, que permite a atacantes remotos manipular el parámetro quant al agregar un producto al carrito. Al establecer el valor de cantidad en...
CVE-2020-18325
Existe una vulnerabilidad de Cross Site Scripting XSS múltiple en Intelliants Subrion CMS v4.2.1 en el panel de Configuración. Descripción Subrion CMS es fácil de instalar y sencillo de administrar. Úselo como aplicación independiente o junto con otras aplicaciones para crear sitios de nivel...
CVE-2015-5531-POC
CVE-2015-5531-POC Contexto de la vulnerabilidad Elasticsearch es un motor de búsqueda RESTful distribuido y de código abierto basado en Lucene, desarrollado por la empresa neerlandesa Elasticsearch. Se utiliza principalmente en entornos de computación en la nube y permite indexar datos mediante...
CVE-2026-45140
abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-45140 CVE-2026-45140 Chamilo LMS 2.0.0 — chamilo Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritati...
The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
