CVE-2025-8110

CVE-2025-8110 - Bypass de symlink en Gogs - escritura arbitraria de archivos como el usuario del proceso Gogs Gogs //contents/. Gogs sigue el symlink y escribe bytes controlados por el atacante en el destino del enlace con los privilegios del proceso Gogs. Cuando Gogs se ejecuta como root, esto e...

CVE-2026-29782-OpenSTAManager-RCE

CVE-2026-29782 — OpenSTAManager auth-SQLi → PHP object injection → RCE PoC for remote code execution inOpenSTAManager ≤ 2.10.1. oauth2.php looks up a zzoauth2 row by the attacker-controlled state GET parameter and calls unserialize on its accesstoken column without anallowedclasses restriction...

CVE-2023-4861-PoC

PoC CVE-2023-4861 Este repositorio contiene una prueba de concepto en Python para CVE-2023-4861 , un problema de ejecución remota de código autenticada en el plugin de WordPress File Manager Pro - Filester. Resumen de la vulnerabilidad CVE: CVE-2023-4861 Producto: File Manager Pro - Filester...

CVE-2025-2945-pgAdmin-RCE

CVE-2025-2945 — Ejecución Remota de Código en la Herramienta de Consultas de pgAdmin 4 CVSS 3.1: 9.9 Crítico · Afecta: pgAdmin 4 8.10 – 9.1 · Corregido en: 9.2 4 de abril de 2025 CWE-95 Neutralización Incorrecta de Directivas en Código Evaluado Dinámicamente / Inyección en Eval Una prueba de...

CVE-2026-12948

CVE-2026-12948 Resumen de la vulnerabilidad Se identificó una vulnerabilidad de cross-site scripting XSS almacenado en la interfaz de gestión web del Digi PortServer TS 4 H MEI. Una solicitud autenticada especialmente manipulada permite que un payload de script se escriba permanentemente en el...

CVE-2026-39902

Informe de Vulnerabilidad: Entrada de Datos RCE Autenticado Investigador: K | Producto: Cacti ≤ 1.2.30 01 Resumen de la Vulnerabilidad Campo| Valor ---|--- Producto| Cacti — Solución completa de gráficos basada en RRDtool Versiónes afectadas| ≤ 1.2.30 Tipo de vulnerabilidad| Inyección de comandos...

CVE-2026-36358

CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） Primero, configura la plataforma normalmente y registra una cuenta. Aquí, la cuenta de administrador que registré es [email protected] / 123456. Después de configurar la plataforma, puedes ver la página de inicio del sitio web. Accede a /admin e...

CVE-2026-106430

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...

CVE-2026-84274

The IBM Guardium Data Protection 12.2.2 version is affected by a sensitive information exposure vulnerability (CWE-200 ). During SECRET and API_KEY rotation processing, the edge-controller and edge-manager components log sensitive credential material at the INFO level. An authenticated attacker w...

EUVD-2026-95166

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

CVE-2026-106433

Improper state management in MongoDB libmongocrypt allows for heap corruption when cleaning up a key document that contains duplicate masterKey fields. This flaw causes provider-specific data to be treated as an incompatible type, leading to invalid memory access and invalid frees in the client p...

CVE-2026-106433 Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106433 Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106433

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106429 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2025-50286

Grav CMS v1.7.48 / Admin Plugin v1.10.48 - RCE autenticado a través de la subida de plugins CVE-2025-50286 Grav CMS v1.7.48 con Admin Plugin v1.10.48 es vulnerable a Ejecución Remota de Código RCE a través de la función de subida de plugins "Instalación Directa", permitiendo a administradores...

CVE-2026-106430

The MongoDB C++ Driver is vulnerable to query and rename target confusion due to embedded NUL truncation . The driver discards content following a NUL byte in specific field and collection names accepted by the collection API , leading to a discrepancy between how the driver and the calling appli...

CVE-2026-106430 Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...

EUVD-2026-95155

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...

Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...