CVE-2026-105284 Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Autorización faltante para usuarios autenticados Suscriptor+ que permite la actualización arbitraria de metadatos de usuario Descripción El plugin WP Courses LMS – Online...

Nessus_CVE-2014-6271_check

NessusCVE-2014-6271check Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

markdown CVE-2026-50751 - Check Point IKEv1 Authentication Bypass Exploit ⚠️ ADVERTENCIA IMPORTANTE Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas sin permiso explícito es ILEGAL. El autor no se hace responsable del uso indebido d...

netview

= netview Netview es una herramienta de enumeración. Usa con -d el dominio actual o un dominio especificado con -d dominio para enumerar hosts. También puedes usar -f si deseas especificar un archivo con una lista de hosts en su lugar. Cualquier nombre de host que desees excluir puede especificar...

MAL-2026-17580 Malicious code in base58-check-helper (RubyGems)

RubyGems runs this gem's native extension script ext/base58-check-helper/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 3...

Malicious code in base58-check-helper (RubyGems)

RubyGems runs this gem's native extension script ext/base58-check-helper/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 3...

cve-2022-42889-check

Este repositorio no tiene un README...

CVE-2024-29943

CVE-2024-29943 Un bug del JIT de SpiderMonkey en Pwn2Own: de la inconsistencia de rango de enteros a la eliminación de comprobación de límites y, luego, RCE. Reproducción de CVE-2024-29943 para Windows, basada en https://github.com/bjrjk/CVE-2024-29943 Modificaciones El exploit original está...

Yellow-Key-Check

Este repositorio no tiene un README...

CVE-2024-56067

CVE-2024-56067 WP SuperBackup = 2.3.3 - Falta de autorización para la descarga no autenticada de archivos de copia de seguridad Descripción El plugin Super Backup & Clone - Migrate for WordPress para WordPress es vulnerable a acceso no autorizado debido a una falta de comprobación de capacidades ...

CVE-2024-10578

CVE-2024-10578: Pubnews = 1.0.7 - Instalación no autenticada de plugins arbitrarios Descripción El tema Pubnews para WordPress es vulnerable a la instalación no autorizada de plugins arbitrarios debido a una falta de comprobación de capacidades en la función pubnewsimporterpluginactionfornotice e...

CVE-2024-37010

CVE-2024-37010 Exploit para CVE-2024-37010: acceso al almacenamiento externo de otros usuarios y movimiento lateral: https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0753/ https://owncloud.com/security-advisories/insecure-direct-object-reference-in-external-storage Intro Owncloud convierte un...

CVE-2026-11561

CVE-2026-11561 — Comprobación de versión de Apinizer SSTI / RCE Infraestructura Plantilla de Nuclei para detectar versiones de Apinizer inferiores a 2026.04.6, que son vulnerables a CVE-2026-11561 Server-Side Template Injection que conduce a la ejecución remota de código, CVSS 9.8. Uso echo |...

CVE-2026-20588

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...

CVE-2026-20527

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20541

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2026-20541

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitatio...