CVE-2025-53770

CVE-2025-53770 Este es un escáner de múltiples sitios para la vulnerabilidad RCE no autenticada CVE-2025-53770. Otros escáneres/PoCs:- https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 Sharepoint RCE Impacto: Atacantes no autenticados puede...

CVE-2024-38077

CVE-2024-38077 Aquí hay una posible descripción de GitHub para CVE-2024-38077: CVE-2024-38077: Vulnerabilidad de ejecución remota de código en el servicio de licencias de escritorio remoto de Windows Resumen: CVE-2024-38077 es una vulnerabilidad crítica en el Servicio de licencias de escritorio...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – What Happened? In August 2025, SAP’s flagship ERP platform S/4HANA was found to expose a vulnerability in one of its RFC‑enabled function modules. Attackers who possess only low‑privileged access can inject arbitrary ABAP code into that module, bypassing...

Linux Distros Unpatched Vulnerability : CVE-2026-59683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full...

CVE-2024-4879

CVE-2024-4879 ServiceNow, una piattaforma ampiamente utilizzata per la trasformazione aziendale, ha recentemente divulgato tre vulnerabilità critiche di sicurezza che potrebbero avere gravi conseguenze per le organizzazioni in tutto il mondo. Queste vulnerabilità, identificate come CVE-2024–4879,...

Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution

Laravel version 8.4.2 and before with Ignition before 2.5.2 allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2. id: CVE-2021-3129 info: name:...

Malicious code in 3layerdipstackbndk47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348dc9c5c9f9b067e597312e0e8228c5bddb04ca7573801a6ae27ab9809cb520 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1lkqg9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3055362817a22386f2c0e5db959db42444b9c60d620c9c8453ee196a1d0e8fe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14596 Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackc6c5kn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5095fa04b6e4feb276e9a1376a4b4c7644115b5ffc5021f55edbf5c5646d2c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack8xhwdm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb57760067d22b8d95fed83ab820f3c63a22e6f7f8d08a1d2fa9bef5810259f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

-CVE-2025-8088

-CVE-2025-8088 Script POWERSHEL per verificare se il tuo dispositivo è interessato o meno 🚨 CVE-2025-8088: Allerta Zero-Day di WinRAR! 🚨 Una vulnerabilità critica di WinRAR CVE-2025-8088 sta facendo notizia: gli aggressori possono sfruttare questa falla nelle versioni 7.13 per eseguire codice...

CVE-2025-49132

CVE-2025-49132 — RCE di Pterodactyl Strumento di exploit per CVE-2025-49132 — una vulnerabilità critica di esecuzione arbitraria di codice non autenticata che colpisce il pannello del server di gioco Pterodactyl. 🧠 Cos'è CVE-2025-49132 ? Una falla ACE critica nel pannello Pterodactyl che consente...

USN-8661-3: Linux kernel vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

CVE-2026-59683

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-59683 OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-59683

The OpenRGB network protocol permits writing attacker-controlled strings into arbitrary file system paths , an extension of CVE-2026-59682. If the OpenRGB daemon runs as root , this enables full system compromise from local or remote (network) vectors; if it runs in user context , it allows full ...

CVE-2026-59683 OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-59683 OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...