CVE-2025-12721

g-FFL Cockpit = 1.7.1 - Exposición de Información no Autenticada El plugin g-FFL Cockpit no implementa verificaciones de autorización adecuadas en el endpoint de la API REST serverstatus, permitiendo que usuarios no autenticados accedan a información sensible de configuración del servidor, ajuste...

gitlab-component

gitlab-component Primeros pasos Para facilitarte el inicio con GitLab, aquí tienes una lista de pasos recomendados. ¿Ya eres un profesional? Solo edita este README.md y hazlo tuyo. ¿Quieres hacerlo fácil? Usa la plantilla al final. Añade tus archivos Crear o subir archivos Añadir archivos usando ...

EUVD-2026-74618

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

ROOT-OS-DEBIAN-12-CVE-2025-37768 CVE-2025-37768 in linux - Patched by Root

Root has patched CVE-2025-37768 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-21634 CVE-2025-21634 in linux - Patched by Root

Root has patched CVE-2025-21634 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-43308 CVE-2026-43308 in linux - Patched by Root

Root has patched CVE-2026-43308 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53185 CVE-2026-53185 in linux - Patched by Root

Root has patched CVE-2026-53185 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38729 CVE-2025-38729 in linux - Patched by Root

Root has patched CVE-2025-38729 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-87035

Tanium addressed an information disclosure vulnerability in Comply...

CVE-2026-87032

Tanium addressed an information disclosure vulnerability in Tanium Server...

CVE-2022-31793

CVE-2022-31793 -u especificar IP -l especificar archivo de IPs -v modo de verificación -f especificar archivo a leer python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

CVE-2025-68664

CVE-2025-68664 All I Want for Christmas Is Your Secrets: LangGrinch Strikes LangChain Core CVE-2025-68664 Author: Yarden Porat Cyata Research: LangGrinch Vulnerability in LangChain Published: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/ Yesterday LangChain published a critical...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ Investigación CTI Multi-CVE de NGINX 2026 CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Creado por Pratik Chhetri Fecha del informe: 2026-07-28 📌 Resumen ejecutivo...

CVE-2026-87032 Tanium addressed an information disclosure vulnerability in Tanium Server.

Tanium addressed an information disclosure vulnerability in Tanium Server...

CVE-2026-87032

Tanium Server is affected by an information disclosure vulnerability addressed by Tanium, per advisory TAN-2026-033 . The assigned CVSS 3.1 base score is 4.3 (MEDIUM) , with a network vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and a low confident...

DEBIAN-CVE-2026-87563

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-42992

CVE-2024-42992 Se ha descubierto que Python Pip Pandas v2.2.2 contiene una vulnerabilidad de lectura de archivos arbitrarios. Pip Pandas todas las versiones -=2.2.2 Existe una vulnerabilidad de lectura de archivos arbitrarios en la librería “pandas”, que un atacante puede explotar para leer sin...

POC-2020-8558

Resumen CVE-2020-8558 es una vulnerabilidad de Kubernetes que fue publicada porque kube-proxy inesperadamente hace que los servicios del host vinculados a localhost estén disponibles para otros en la red. Pongo énfasis en inesperadamente porque esta vulnerabilidad se debe a un defecto de diseño...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74386

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...