534103 matches found
CVE-2026-81943
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...
CVE-2026-81305
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...
CVE-2026-7006
Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...
CVE-2026-10858
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...
CVE-2026-10853
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...
CVE-2026-11378
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing...
CVE-2026-11375
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers...
CVE-2026-10747
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...
CVE-2026-10751
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...
VulnHub-DC1-Writeup
VulnHub-DC1-Writeup "Writeups de laboratorio de pruebas de penetración que documentan cadenas de ataque completas — desde el reconocimiento hasta el root." 🔓 VulnHub — DC-1 Boot-to-Root Writeup Dificultad: Principiante–Intermedio Plataforma: VulnHub Objetivo: Capturar las 4 banderas y lograr un...
CVE-2026-3891
🚀 CVE-2026-3891 – Subida de Archivos no Autenticada con RCE en Pix for WooCommerce Exploit de prueba de concepto para CVE-2026-3891 – subida arbitraria de archivos no autenticada que conduce a la ejecución remota de código en el plugin de WordPress Pix for WooCommerce ≤ 1.5.0. 📖 Resumen...
CVE-2026-20841-PoC
No está claro si este es el método de activación correcto del PoC; por lo tanto, se proporciona solo como referencia. CVE-2026-20841 - Windows notepad.exe RCE Condición de explotación: Versión de Notepad 11.2510 paso 1. paso 2...
CVE-2026-9645-ScadaBR-Analysis
CVE-2026-9645 — ScadaBR Vulnerability Analysis Technical vulnerability analysis and CVE briefing for CVE-2026-9645 , affecting the open-source ScadaBR SCADA/HMI platform. Overview CVE-2026-9645 is a critical authenticated remote code execution vulnerability in ScadaBR. According to the prepared...
CVE-2026-81305 CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...
CVE-2026-81305 CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...
EUVD-2026-83044
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...
CVE-2026-81305
CareCam CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity (CWE: Inclusion of Functionality from Untrusted Control Sphere). An attacker with physical access to the device can supply a malicious script, achieving arbi...
CVE-2026-11381
IBM MQ is vulnerable to a heap-based buffer overflow (CWE-122) in the queue manager's message descriptor conversion when processing message distribution list structures . An authenticated network attacker can trigger a denial of service or potentially execute arbitrary code. IBM rates the severit...
CVE-2026-11381 IBM MQ for HPE NonStop is vulnerable to a denial of service issue
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures...