CVE-2022-47986

CVE-2022-47986 Por qué Esta vulnerabilidad se explota activamente. IceFire utiliza esta vulnerabilidad para desplegar el ransomware en sistemas objetivo. Me gustaría ayudar a los equipos de SOC/Blue a identificar los sistemas afectados y a los Pentesters/Red a explotarla y reportarla. Descripción...

CVE-2026-75777

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...

CVE-2026-75777

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 are vulnerable to a container escape caused by unrestricted system calls being permitted within the container. A local attacker with low privileges can exploit this to break out of the container, resulting in high impact to confidentialit...

CVE-2026-75777 Multiple vulnerabilities in IBM Aspera Enterprise Webapps

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...

CVE-2026-75777 Multiple vulnerabilities in IBM Aspera Enterprise Webapps

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...

CVE-2026-75777: Improper Privilege Management

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.18 Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process...

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to the improper implementation of the sequence of actions to be performed. This allows an attacker to trigger a service failure.

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service...

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to inconsistencies in the responses to incoming requests. This allows an attacker to gain unauthorized access to protected information.

The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to insufficient control over interaction frequencies. This allows a malicious actor to trigger a service failure.

The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...

Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway

Summary Multiple vulnerabilities were addressed in IBM Aspera HTTP Gateway version 2.3.4 Vulnerability Details CVEID:CVE-2026-2303 DESCRIPTION: The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap...

CVE-2026-11980

IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up...

CVE-2026-14959

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection...

CVE-2026-14973

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination...

CVE-2026-14958

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation...

CVE-2026-14958 OS command injection in IBM Aspera Faspex

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation...

EUVD-2026-50055

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection...

CVE-2026-14973 Path Traversal in IBM Desktop App

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination...

CVE-2026-14973

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination...

CVE-2026-14973 Path Traversal in IBM Desktop App

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination...