Sudo-Vulnerability-Exploit-CVE-2019-14287

Sudo-Vulnerability-Exploit-CVE-2019-14287 Se ha descubierto que Sudo no es confiable, una de las utilidades más significativas, potentes y comúnmente usadas instaladas en casi cualquier sistema operativo basado en Unix y Linux como un comando simple. Una falla de omisión de la política de segurid...

CVE-2026-81021

The SupportCandy WordPress plugin (versions 3.2.9 through 3.5.2) contains a missing authorization check on one of its support-ticket attachment download paths. This allows unauthenticated attackers to read protected customer-uploaded attachments by enumerating sequential attachment identifiers. T...

CVE-2020-10199_POC-EXP

Versiones afectadas + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version = 3.21.1 + +----------------------------------------------------------------------------------------------------------+...

CVE-2026-22014-GraphQL-Persisted-Queries-Injection-via-ID-Manipulation

CVE-2026-22014 – GraphQL Persisted Queries Injection via ID Manipulation Program Code Node.js root@kitploit: // graphqlpersisted.js - Accepts persisted query IDs const express = require'express'; const graphqlHTTP = require'express-graphql'; const queries = "abc": "query user name " ;...

ROOT-OS-DEBIAN-12-CVE-2025-71233 CVE-2025-71233 in linux - Patched by Root

Root has patched CVE-2025-71233 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53074 CVE-2026-53074 in linux - Patched by Root

Root has patched CVE-2026-53074 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31617 CVE-2026-31617 in linux - Patched by Root

Root has patched CVE-2026-31617 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68259 CVE-2025-68259 in linux - Patched by Root

Root has patched CVE-2025-68259 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2024-51030

CVE-2024-51030 Descripción Una vulnerabilidad de inyección SQL en manageclient.php y viewcab.php de Sourcecodester Cab Management System 1.0 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id, lo que conduce a acceso no autorizado y posible compromiso de datos...

CVE-2024-48427

CVE-2024-48427 Descripción Una vulnerabilidad de inyección SQL en Sourcecodester Packers and Movers Management System v1.0 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro id en /mpms/admin/?page=services/manageservice&id Tipo de Vulnerabilidad...

CVE-2026-79322

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 mageplaza/magento-2-blog-extension through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view...

CVE-2026-61908

Cyrus IMAP before 3.12.4 (also patched in 3.8.8 and 3.10.4) is affected by an out-of-bounds read in its JMAP email-header blob ID handling. An authenticated user can craft a JMAP blob ID of the form H- referencing an index beyond the bounds of the internal blob_headers array , causing a read past...

CVE-2026-61908

An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing...

The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

EUVD-2026-75134

An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing...

CVE-2026-79322

CVE-2026-79322 is a SQL injection vulnerability in the RelatedProduct block of Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through version 4.3.2 . Remote unauthenticated attackers can execute arbitrary SQL commands and read arbitrary database contents by manipulating the id ...

The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OAuth Device Code Grant endpoint. The issue results from the generation of...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository para VulApps Fork de joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git escribirá la salida de id en un archivo vul en /var/www/html. Ver más en VulApps...

Sudo-Security-Bypass-CVE-2019-14287

Sudo-Security-Bypass-CVE-2019-14287 =========================================================================== root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██╗ █████╗ ██╗██╗ ██╗██████╗ █████╗ ███████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗███║██╔══██╗ ███║██║...