CVE-2014-4109

Este crash es difícil de reproducir. El proof of concept incluido facilita un poco desencadenar la ruta de código que provoca el fallo. Mi proceso super científico para verificar el crash era hacer clic en la url con una mano y presionar enter con la otra. Generalmente crashea dentro de 15...

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

CVE-2022-21894

baton drop CVE-2022-21894: Vulnerabilidad de omisión de la característica de seguridad de Secure Boot Las aplicaciones de arranque de Windows permiten que la configuración truncatememory elimine bloques de memoria que contienen rangos "persistentes" de datos serializados del mapa de memoria, lo q...

CVE-2026-81011

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are handed the wrong element count. hpinitbiospackageattribute validates obj-package.count and then calls one of the five...

EUVD-2026-76334

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are handed the wrong element count. hpinitbiospackageattribute validates obj-package.count and then calls one of the five...

CVE-2026-81011

CVE-2026-81011 affects the Linux kernel's platform/x86: hp-bioscfg driver . The per-type package parsers (string, integer, enumeration, ordered list, password) derive their element count from elements[0]—the ACPI NAME field—reading ->string.length through the acpi_object union instead of the v...

CVE-2026-81011 platform/x86: hp-bioscfg: pass validated element count to package parsers

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are handed the wrong element count. hpinitbiospackageattribute validates obj-package.count and then calls one of the five...

poc-cve-2018-1273

CVE-2018-1273 Spring Data Commons, versiones anteriores a 1.13 hasta 1.13.10, 2.0 hasta 2.0.5, y versiones antiguas no soportadas, contienen una vulnerabilidad de enlace de propiedades causada por una neutralización incorrecta de elementos especiales. Un usuario malicioso remoto no autenticado o...

synapse

Synapse |support| |development| |documentation| |license| |pypi| |python| Synapse ahora se mantiene activamente en element-hq/synapse Synapse es un homeserver de código abierto Matrix desarrollado desde 2019 hasta 2023 como parte de la Fundación Matrix.org. La Fundación Matrix.org no puede manten...

PT-2026-90141

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are handed the wrong element count. hp init bios package attribute validates obj-package.count and then calls one of the five ...

PT-2026-89858

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element. An authenticated attacker can inject malicious JavaScript by submitting a crafte...

CVE-2022-34169

Descripción Comprueba si CVE-2022-34169 está corregido en tu máquina. Hasta donde sé, un empleado de Google encontró un exploit y no fue publicado. Dado que la corrección es conocida, se escribió una pequeña rutina de prueba para verificar si la corrección está disponible en tiempo de ejecución...

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization when traversing ancestor tags across element boundaries. When an application renders untrusted user input within raw-text tags , , , comments, or text nodes inside a that is nested...

GHSA-HH8M-FM6V-7CVG Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular automatically sanitizes untrusted values bound to security-sensitive DOM sinks such as href, src, action, xlink:href, and data to protect against Cross-Site Scripting XSS. Prior to the fix, the Angular compiler determined the SecurityContext for directive host bindings host: 'attr.href':...

EUVD-2026-75703

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88058

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...

dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...

CVE-2026-79987 Low-privilege RCE through element-search eager loading

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker...

CVE-2026-79987 Low-privilege RCE through element-search eager loading

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker...

CVE-2026-79987

CVE-2026-79987 is a low-privilege remote code execution vulnerability in Craft CMS , exploitable by a remote, authenticated, non-admin Control Panel user holding only the accessCp permission. The root cause involves element-search eager loading , allowing the attacker to execute operating system ...