CVE-2025-0994

CVE-2025-0994 ¿Cómo funciona este método de detección? Esta plantilla de Nuclei extrae la versión almacenada en el cuerpo del HTML y, en función de la versión, podemos determinar si la instancia es vulnerable a CVE-2025-0994 o no. Versión parcheada: 15.8.9 ¿Cómo ejecuto este script? 1. Descarga...

Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – ¿Qué sucedió? En agosto de 2025, la plataforma ERP insignia de SAP, S/4HANA , fue descubierta con una vulnerabilidad en uno de sus módulos de función habilitados para RFC. Los atacantes que solo poseen acceso de bajos privilegios pueden inyectar código...

CVE-2026-49049

Investigación de la vulnerabilidad CVE-2026-49049: Unauthenticated Arbitrary File Write en JoomShaper Helix3 Joomla El repositorio contiene materiales, análisis técnico y Proof of Concept PoC para la vulnerabilidad crítica CVE-2026-49049 , encontrada en el framework de plantillas heredado Helix3 ...

CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal

CVE-2025-8088：WinRAR 零日路径遍历——从零到攻破 🗿 介绍——这位“老朋友”刚刚被抓到疏忽 WinRAR——每个人都装着但没人更新的古老经典——刚刚被曝出一个高严重性零日漏洞 ：CVE-2025-8088 。 严重性： CVSS v3.1 → 8.8（高） 已在野外被利用 ，攻击者包括 RomCom Storm-0978 和 Paper Werewolf 。 修复版本： WinRAR 7.13 （2025年7月30日发布）。 如果你还在用 7.12 或更低版本——你就是待宰的羔羊。 CISA 甚至把它列入已知被利用漏洞目录 ，修复截止日期为 2025 年 9 月 2 ...

CVE-2025-10585-The-Chrome-V8-Zero-Day

CVE-2025-10585：你需要立即修补的 Chrome V8 零日漏洞 ⚔️🛡️ 谷歌本周发布了一个带外补丁，针对 CVE-2025-10585 ，这是 Chrome 的 V8 JavaScript / WebAssembly 引擎中一个严重的 类型混淆 漏洞。这个漏洞并非理论上的——谷歌威胁分析组确认了在野活跃利用 ，这使得所有使用 Chrome 或其他 Chromium 内核浏览器的用户都必须紧急更新。如果你的安装版本落后，请立即更新。 ⏳🔧 为什么这很重要 🌐 浏览器是大多数终端上暴露面最大的软件。它们解析来自网络各个角落的不可信内容——广告、iframe、脚本、用户上传——而...

cve-2025-53770

CVE-2025-53770 SharePoint 反序列化 RCE 概念验证 严重 — 通过 Microsoft SharePoint Server 中的不安全反序列化实现未认证远程代码执行 CVE-2025-53770 描述 在本地部署的 Microsoft SharePoint Server 中，对不受信任数据的反序列化允许攻击者远程执行代码并危害系统。微软已注意到正在进行的利用活动，并正在准备全面的更新。请确保已实施 CVE 文档中的缓解措施。 影响 : 未认证的攻击者可以实现远程代码执行，导致系统完全沦陷。 严重性 : 严重 概念验证 以下 PoC...

Vulnerabilities found in PaperCut MF and PaperCut NG of PaperCut

PaperCut has vulnerabilities in PaperCut MF and PaperCut NG. An unauthorized malicious actor could potentially exploit these vulnerabilities to gain control over the PaperCut environment and execute arbitrary code. To do this, the malicious actor would need to send malicious network traffic to th...

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the...

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It said it's "aware of...

PT-2026-83118

Name of the Vulnerable Software and Affected Versions PaperCut MF affected versions not specified PaperCut NG affected versions not specified Description An unsafe dynamic class loading issue exists in the database connection utilities. The application instantiates database driver classes based o...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Linux Distros Unpatched Vulnerability : CVE-2026-77647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect...

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231 , is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation. "SAP...

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution RCE. The security defect remain...

CVE-2026-18574 Authentication Bypass in Check Point Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

PT-2026-67387

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator VCO has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 CVSS score: 10.0, is a case of operating system command injection that could pave the way for arbitrary...

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-50522 CVSS score: 9.8, a critical deserialization of untrusted data in Microsoft Office SharePoint tha...