CVE-2026-27872

Johnson Controls Easy IO FG is affected by an Improper Privilege Management vulnerability (CWE-269) that allows for Brute Force attacks. This issue specifically impacts versions before 2.0b52 . While the vulnerability is documented, the provided documents do not specify the exact root cause, prac...

CVE-2026-15911

The Confluent Kafka Python client contains a vulnerability in its HashiCorp Vault KMS integration due to a failure to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker capable of intercepting network traffic could exploit this flaw to intercept and decryp...

CVE-2026-47542

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...

CVE-2026-47492

A flaw was found in the NVIDIA GPU Display Driver. Due to improper access control in the kernel mode layer, an authenticated local attacker can exploit this vulnerability to cause a Denial of Service DoS, resulting in system instability or driver disruption...

cve-2026-29145

CVE-2026-29145 — Las comprobaciones OCSP a veces fallan de forma suave incluso cuando el fallo suave está deshabilitado Descubridor: gregk4sec https://github.com/gregk4sec/cve Fecha de descubrimiento: 2026-02-26 Vendor afectado: Apache Producto afectado: Tomcat Severidad: 9.1 CRÍTICA CWE: CWE-287...

CVE-2026-35616-detector.py

CVE-2026-35616 - Detector de Vulnerabilidades en FortiClient EMS Descripción Esta herramienta detecta si un servidor FortiClient EMS es vulnerable a CVE-2026-35616 , una vulnerabilidad crítica de control de acceso inadecuado que afecta a las versiones 7.4.5 hasta 7.4.6. Puntuación CVSS: 9.1 Críti...

CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ ADVERTENCIA Este código ejecuta comandos arbitrarios en tu sistema. Usar SOLO en máquinas virtuales o contenedores aislados. Descripción PoC funcional para CVE-2026-0848. Demuestra cómo un archivo JAR malicioso puede ejecutar código arbitrario...

CVE-2026-104018 VxWorks 7 improper privilege management

An improper privilege management vulnerability CWE-269 exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluated without the privilege check that is normally applied, allowing an...

CVE-2026-104018

An improper privilege management vulnerability (CWE-269 ) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain shell operations, commands may be evaluated without the standard privilege check, enabling an authenticated user with...

CVE-2026-22444

CVE-2026-22444 Vulnerabilidad de Validación de Rutas UNC en Apache Solr Resumen CVE-2026-22444 es una vulnerabilidad de seguridad que afecta a Apache Solr, divulgada públicamente alrededor del 20 de enero de 2026. La vulnerabilidad se origina por una validación insuficiente de entrada CWE-20:...

CVE-disclosures

CVE-2026-3171 y CVE-2026-3170 – Archana M Divulgaciones oficiales de vulnerabilidades por Archana M. 🔹 CVE-2026-3171 Producto: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Tipo de vulnerabilidad: Cross-Site Scripting CWE-79 Archivo afectado: /queue.php Vector d...

CVE-2026-7071-access-Control

Exposición de Currículums sin Autenticación en CodeAstro Online Job Portal PHP MySQL Detalles Vendedor: CodeAstro Producto: Proyecto de Portal de Empleo en Línea en PHP MySQL Versión: 1.0 Tipo de Vulnerabilidad: Control de Acceso Inadecuado / Divulgación de Información CWE: CWE-284, CWE-200,...

DEBIAN-CVE-2026-63045

Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...

CVE-2026-59797

Improper Privilege Management vulnerability in Apache HTTP Server's modssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2025-31980

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...

windows-smb-vulnerability-framework-cve-2025-33073

Marco de Investigación de Vulnerabilidades del Cliente SMB de Windows Autor: cyberseallll Creado: 2025 Descripción General Desarrollé este marco de investigación para analizar y comprender CVE-2025-33073, una vulnerabilidad crítica de Elevación de Privilegios en el Cliente SMB de Windows. Esta...

CVE-2026-4447

CVE-2026-4447 - V8 en Google Chrome anterior a Ejecución Remota de Código Uso Rápido python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notas de Explotación Severidad: ALTA CVSS: 8.8 Impacto: Confidencialidad, Integridad, Disponibilidad Publicado: 2026-03-20 Resumen...

TestRail-files.md5-IAC-scanner

TestRail-files.md5-IAC-scanner El Control de Acceso Inadecuado en Gurock TestRail versiones Ingrese el servidor en formato http:\ o https:\ El script imprimirá la ubicación del servidor/archivo, el código de estado si no es 500 y cualquier palabra clave interesante encontrada...

social-auth-core has an Improper Authentication issue

ImpactThe SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest.Applications using SAML account association could allow an attacker with a valid account on a trusted IdP to link the attacker's SAML...

LiteLLM: MCP Proxy Has Improper Authentication

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...