CVE-2026-82006

Photoshop Desktop is affected by a Heap-based Buffer Overflow (CWE-122) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction —specifically, a victim must open a malicious file . The CVSS v3.1 base score is 7.8 (HIGH) with a local att...

CVE-2026-75863 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

ENV-CVE-2020-8036

ENV-CVE-2020-8036 — Entorno de reproducción de la vulnerabilidad de tcpdump Este repositorio es una instantánea del entorno de vulnerabilidad reproducible para CVE-2020-8036 lectura fuera de límites en el analizador SOME/IP de tcpdump, CWE-125, exportada de la imagen de contenedor correspondiente...

CVE-2026-82004

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that allows a remote, unauthenticated attacker to execute arbitrary code in the context of the current user. The vulnerability is rated CVSS 10.0 (CRITICAL) with a network attack vector, low complexity, no ...

CVE-2026-76201 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

CVE-2026-77109

Adobe Commerce is affected by an Incorrect Authorization vulnerability (CWE-863) that allows a privilege escalation to restricted resources. The flaw is exploitable over the network with low complexity , requires no prior privileges and no user interaction , and has a changed scope , resulting in...

CVE-2026-77109 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-77108

Adobe Commerce is affected by an Incorrect Authorization (CWE-863) vulnerability that can lead to privilege escalation , allowing a remote attacker with no user interaction to gain elevated access to sensitive information . The assigned CVSS v3.1 score is 7.5 (High) , reflecting a network-vectori...

CVE-2026-77110 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the...

CVE-2026-76202 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction...

CVE-2026-76202 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction...

CVE-2026-76202

Adobe Commerce is affected by an Incorrect Authorization vulnerability (CWE-863) that could allow an unauthenticated, remote attacker to escalate privileges and gain elevated access to sensitive information without user interaction. The CVSS v3.1 score is 8.2 (HIGH) , with primary impact to confi...

CVE-2024-33352

CVEID : CVE-2024-33352 ID de aviso de Bluestacks : pendiente Nombre del productos y versiónes afectados : BlueStacks para Windows versiones anteriores a 10.40.1000.502 Tipo de vulnerabilidad : CWE-552: Archivos o directorios accesibles a partes externas Resumen BlueStacks es un emulador de Androi...

CVE-2026-72989

CVE-2026-72989 affects Windows Failover Cluster due to a use of uninitialized resource , allowing an unauthorized attacker to disclose information over a network . The vulnerability carries a CVSS 3.1 score of 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a network-e...

CVE-2026-76191

Adobe Animate is affected by a Code Injection (CWE-94) vulnerability that can lead to arbitrary code execution in the context of the current user. A low-privileged attacker can exploit this by persuading a victim to open a malicious file , making user interaction required. The scope is changed , ...

CVE-2022-0482_exploit

CVE-2022-0482 Vulnerability Exploitation Introduction This document outlines the detailed analysis of CVE-2022-0482, a critical security vulnerability identified in the Easy!Appointments scheduling software. This flaw, related to Incorrect Authorization under CWE-863, allows unauthorized access t...

CVE-2026-46394-haxcms-git-command-injection

CVE-2026-46394 - HAXcms Git.php OS Command Injection CWE-78 Proof-of-concept for authorized security testing and research only. The vulnerability described here is fixed in the latest release of HAXcms. This PoC is published so that defenders and researchers can verify the issue on unpatched...

CVE-2026-46395-haxcms-hmac-key-leak

CVE-2026-46395 - Divulgación de clave privada en HAXcms Node.js mediante HMAC defectuoso CWE-321 / CWE-200 Prueba de concepto únicamente para pruebas de seguridad e investigación autorizadas. La vulnerabilidad descrita aquí está corregida en la última versión de HAXcms. Este PoC se publica para q...

CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-

Aviso de seguridad: los controles de acceso insuficientes permiten la eliminación no autorizada de salas Let's Chat Identificador CVE asignado: CVE-2026-66751 Resumen DELETE /rooms/:room no realiza ninguna comprobación de autorización más allá de requerir un inicio de sesión. Cualquier cuenta pue...

CVE-2026-25089

🚨 CVE-2026-25089 - Inyección Crítica de Comandos del SO en FortiSandbox 📖 Resumen CVE-2026-25089 es una vulnerabilidad crítica de Inyección de Comandos del SO CWE-78 que afecta a múltiples despliegues de Fortinet FortiSandbox. Un atacante remoto no autenticado puede explotar esta falla enviando...