Log4j-Updater

Log4j Updater Con la inevitable necesidad de actualizar el famoso framework de Java llamado Log4j, numerosas empresas necesitan actualizar Log4j en varios equipos al mismo tiempo, lo que requiere tiempo y costo, y ahí es donde entra el Log4j Updater. log4jupdater.sh es un sencillo script bash cuy...

toolkit

English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...

CVE-2019-19652

CVE-2019-19652 Ataque de degradación de Chevereto - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. Un usuario administrador puede indicar al script de actualización que degrade a otra versión en lugar de actualizar, reintroduciendo fallos anteriores. Debido a la falta de un token CSRF, este ataque también...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

CVE-2023-7261

CVE-2023-7261 Vulnerabilidad de escalada de privilegios local en DosDevices del actualizador de Google Chrome Detalles: Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de Google Chrome. Un atacante debe primero obtener la capacidad de ejecutar código...

CVE-2026-57239

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Build Just build the binary, drop it on your target and run it. root@kitploit: cargo build --release Usage Th...

PcanExploit

CVE-2024-44610: Exploit de raíz autenticado para PEAK PCAN-Ethernet Gateway FD DR ¿Qué es? Este repositorio contiene un exploit de Prueba de Concepto PoC que ejecutó código como root en las puertas de enlace Ethernet de Peak. Requiere que conozcas las credenciales de la interfaz web. ¿Cómo...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Software interessato: versioni di Notepad++ precedenti alla versione 8.8.9 che utilizzano l'aggiornatore WinGUp. Tipo di vulnerabilità: bypass della verifica dell'integrità degli aggiornamenti che porta all'esecuzione di codice arbitrario. Descrizione: l'aggiornatore WinGUp non verifica...

CVE-2026-30612

An issue in Time4 Popcorn for Windows = 6.2.1.18 and Time4Popcorn for MacOS = 6.2.1.17 and Time4Popcorn for Android = 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components...

CVE-2026-30612

Time4 Popcorn (Windows ≤ 6.2.1.18, macOS ≤ 6.2.1.17, Android ≤ 3.5.0.173) contains a vulnerability that allows a remote attacker to execute arbitrary code via the updater.exe component on Windows and the PT.updd component on macOS. The underlying root cause is not further detailed in the provided...

CVE-2026-30612

An issue in Time4 Popcorn for Windows = 6.2.1.18 and Time4Popcorn for MacOS = 6.2.1.17 and Time4Popcorn for Android = 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components...

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloader to enable ad...

GO-2026-4942 vulnerabilities

Vulnerabilities for packages: kots, argocd-image-updater, gitness, portieris, envoy-gateway, zot...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, spicedb-operator, metrics-server, spicedb, tekton-chains, node-feature-discovery, rancher-agent, k3s, kube-metrics-adapter, kube-rbac-proxy, cass-operator, rancher, openbao, yunikorn-k8shim, kubernetes-csi-external-resizer,...

PT-2026-77253

Name of the Vulnerable Software and Affected Versions EPSON 150075647YWWV110 EasyMP Network Updater version 1.20 Description A verification bypass allows the Epson projector to be updated using encrypted firmware via USB. Recommendations At the moment, there is no information about a newer versio...

EUVD-2021-34865

Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kots, envoy-gateway, portieris-fips, argocd-image-updater-fips, gitlab-rails-ce-fips, portieris, envoy-gateway-fips, argocd-image-updater, gitness, zot...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: headlamp, chartmuseum-fips, manifest-tool, xeol-fips, helm-exporter-fips, argocd-image-updater-fips, cluster-api-helm-controller-fips, cloudbeat, kgateway-fips, linkerd2, helm-operator, k8ssandra-client, chartmuseum, gogatekeeper, cert-manager-cmctl, redpanda-operato...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, aws-efs-csi-driver-fips, aws-efs-csi-driver...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kots, envoy-gateway, portieris-fips, argocd-image-updater-fips, gitlab-rails-ce-fips, portieris, envoy-gateway-fips, argocd-image-updater, gitness, zot...