SureTriggers – All-in-One Automation Platform ≤ 1.0.78 - Authentication Bypass

The SureTriggers- All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

VMware Aria Operations for Networks - Remote Code Execution

Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria Operations for Networks and valid 'member' role credentials may be able to perform a deserialization attack resulting in remote code execution. id:...

PaperCut NG - Authentication Bypass

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

cve-2024-52005-poc

CVE-2024-52005: Inyección de Secuencias de Escape ANSI en Git Resumen Este repositorio contiene una Prueba de Concepto PoC que demuestra CVE-2024-52005, una vulnerabilidad en Git que permite la inyección de secuencias de escape ANSI a través del canal sideband durante operaciones de Git...

CVE-2026-101156

A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...

EUVD-2026-93960

A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...

CVE-2026-101150

A vulnerability exists due to insufficient validation of OIDC bearer token configuration . This flaw could allow an attacker with specific high privileges to perform Server-Side Request Forgery (SSRF) by directing requests to arbitrary destinations. The impact is categorized as Medium severity, w...

CVE-2026-79810 Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...

CVE-2026-79810

HPE Networking ClearPass Policy Manager contains Remote Code Execution (RCE) vulnerabilities within its affected interface. An authenticated remote attacker with high privileges can exploit this flaw to execute arbitrary code and commands on the underlying operating system. The severity is rated ...

CVE-2026-79810 Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...

CVE-2026-88252 Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

A flaw was found in sssd. A local user can cause a Denial of Service DoS by exhausting the responder service's available file descriptors system handles used for open connections. By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection...

cve-2021-44228-log4j-exploits

CVE-2021-4428 Reproducción Este DEMO es una reproducción de la vulnerabilidad RCE de altísimo riesgo Log4j2 CVE-2021-4428, cuyo objetivo es conocer el peligro de esta vulnerabilidad y adoptar defensas específicas según la situación de su sistema. Advertencia Este DEMO es únicamente una...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

keycloak: Keycloak: Denial of Service via specially crafted SAML input

A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language SAML endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service DoS where the server becomes...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

keycloak: Keycloak: Denial of Service via specially crafted SAML input

A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language SAML endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service DoS where the server becomes...

patch-CVE-2026-09881

Parche: CVE-2026-09881 Detalles de la Vulnerabilidad CVE : CVE-2026-09881 Producto : Atlassian Confluence Descripción : Inyección de plantillas RCE Gravedad : Alta Estado del Parche: DESPLEGADO Campo| Valor ---|--- Fecha del Parche| 2026-04-01 Estado| desplegado Desplegado En| Producción Validado...

patch-CVE-2026-06555

Parche: CVE-2026-06555 Detalles de la vulnerabilidad CVE : CVE-2026-06555 Producto : SonicWall SMA Descripción : Path traversal Gravedad : Alta Estado del parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche| 2026-02-25 Estado| desplegado Desplegado en| Producción Validado por| Equipo SecOps...

cve-2026-41200-stig-manager-oidc-reflected-xss

CVE-2026-41200 — PoC de XSS Reflejado en STIG Manager OIDC Prueba de concepto de la vulnerabilidad de Cross-Site Scripting XSS reflejado en STIG Manager versiones 1.5.10 hasta 1.6.7. Resumen de la vulnerabilidad Existe una vulnerabilidad de XSS reflejado en el código de manejo de errores de...