EUVD-2026-88484

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.fromjwk is affected because PyJWK verification path used the decoded key without applying preparekey validation. This occurs when a trusted JWK Set contains an oct entry with an empty k value. As...

CVE-2026-102266

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.fromjwk is affected because PyJWK verification path used the decoded key without applying preparekey validation. This occurs when a trusted JWK Set contains an oct entry with an empty k value. As...

CVE-2026-102266

The Python library PyJWT (versions 2.13.0 through 2.14.0 ) is vulnerable in the HMACAlgorithm.from_jwk function. The root cause is that the PyJWK verification path uses a decoded key without applying prepare_key validation when a trusted JWK Set contains an oct entry with an empty k value . This ...

CVE-2026-12717

A flaw was found in BigQuery Data Transfer Service. An authenticated attacker can achieve arbitrary code execution within the connector container by supplying crafted Java Database Connectivity JDBC connection string parameters. Successful exploitation can further allow the attacker to escalate...

CVE-2024-51482

CVE-2024-51482 - ZoneMinder Blind SQL Injection Table of Contents Overview Vulnerability Details Technical Analysis Exploitation Guide Installation Usage Examples Mitigation References Overview CVE-2024-51482 is a critical boolean-based SQL Injection vulnerability discovered in ZoneMinder, a...

CVE-2026-3854-lab

Flagship Lab 001: De las opciones de push de Git al RCE Un Learning Lab y Research Lab local inspirados en los conceptos de vulnerabilidad documentados públicamente detrás de CVE-2026-3854. Ambas experiencias usan pushes de Git autenticados reales contra ForgeDock, un servidor Git ficticio; el...

CVE-2022-36779

Inyección de comandos autenticada para CVE-2022-36779 disfruta :...

CVE-2024-32136

BWL Advanced FAQ Manager 2.0.3 - Inyección SQL post-autenticación Título del exploit: BWL Advanced FAQ Manager 2.0.3 - Inyección SQL post-autenticación Fecha: 14 abr 2024 Autor del exploit: Ivan Spiridonov xbz0n Enlace del software: https://codecanyon.net/item/bwl-advanced-faq-manager/5007135...

CVE-2026-69212

CVE-2025-69212 — Inyección de comandos del sistema operativo en OpenSTAManager RCE Prueba de concepto del exploit para CVE-2025-69212 , una vulnerabilidad de inyección de comandos del sistema operativo en OpenSTAManager ;echo ".p7m Ejecución resultante en el shell: openssl smime ... -in...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — Inyección de comandos del sistema operativo en mediaclip.cgi de AXIS Informe de investigación n-day y PoC — análisis técnico posterior al parche de una vulnerabilidad de inyección de comandos del sistema operativo con CVSS 7.1 en la API VAPIX Media Clip de AXIS, redescubierta de...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Inclusión de Archivos Locales Description : El Customer Support System 1.0 es vulnerable a la Inclusión de Archivos Locales. Un usuario autenticado tiene la capacidad de acceder y leer archivos PHP del sistema operativo explotando una vulnerabilidad de...

CVE-2021-29447

CVE-2021-29447 POC para explotar la inyección XXE autenticada en WordPress 5.6-5.7 PHP 8+. Más información sobre este CVE aquí Ejemplo Ejemplo de uso contra la máquina MetaTwo de HackTheBox, que aloja un sitio web de WordPress con la biblioteca de medios vulnerable a la inyección XXE. python lfi....

CVE-2023-46003

CVE-2023-46003 XSS almacenado en i-doit Pro 25 y versiones anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de XSS almacenado. Esto podría permitir a atacantes autenticados remotos con privilegios bajos o altos almacenar datos peligrosos payload XSS o página HT...

CVE-2021-43408

CVE-2021-43408: Wordpress Plugin Duplicate Post versión 1.1.9 - Inyección SQL I. Descripción general 1. ¿Qué es WordPress? WordPress es un software CMS Sistema de Gestión de Contenidos de código abierto, un sistema de gestión de contenidos. En lugar de utilizar el lenguaje de marcado HTML,...

CVE-2026-75600

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator...

CVE-2026-55160

Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery SSRF vulnerability allows any authenticated user to force the Stringer server to send arbitrary HTTP/HTTPS requests to internal networks, localhost services, and cloud metadata...

CVE-2026-54708

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...

CVE-2026-54675

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

CVE-2026-45562

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

CVE-2023-51281

CVE-2023-51281 Customer Support System 1.0 - Multiple Cross-Site Scripting XSS Vulnerability in “firstname”, "lastname", "middlename", "contact" or “address” parameters Description : Multiple cross-site scripting XSS vulnerabilities in /customersupport/ajax.php?action=savecustomer in Customer...