CVE-2022-36163

CVE-2022-36163 Descripción sugerida Se encontró una vulnerabilidad de cadena de formato en el lector de pdf pdftoroff hovacui 1.1.0. Un usuario puede controlar el segundo parámetro de sprintf lo que puede provocar una denegación de servicio DoS o divulgación de información para más ataques...

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic. "When a visitor interacts with the page, the lure...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to obtain sensitive information [CVE-2026-18104]

Summary IBM Db2 Mirror for i is vulnerable to obtaining sensitive information CVE-2026-18104 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18104 DESCRIPTION: IBM i could allow a local attacker to obtain sensitive information due to the use of the AES...

EUVD-2026-85911

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header...

CVE-2026-81549

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) due to improper validation of the X-Forwarded-Proto header. This flaw could allow a remote authenticated attacker to obtain sensitive information. To remediate this vulnerability, I...

CVE-2026-81549 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header...

CVE-2026-6544

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a flaw that allows recursive copying of directories without proper controls. This lack of restriction can result in the unintentional inclusion of sensitive or unnecessary files and an increased attack surface . The documents do not provi...

CVE-2026-6544 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface...

CVE-2026-19492 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

CVE-2026-18104

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18870

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-18870 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-86006

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-85892

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18104

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2020-10977

Exploit en Python para lectura arbitraria de archivos en instancia privada de gitlab En la fecha 23/03/2020, se publicó un informe de vulnerabilidad con su PoC en hackerone por William Bowling Con esta vulnerabilidad podemos leer cualquier archivo legible por el mundo con permiso 444 o más en el...

CVE-2018-17456

CVE-2018-17456...

CVE-2018-18778

CVE-2018-18778 - ACME minihttpd Lectura Arbitraria de Archivos CVE-2018-18778 es una vulnerabilidad de seguridad que afecta a ACME minihttpd un servidor web ligero. La vulnerabilidad permite a atacantes remotos leer archivos arbitrarios en el servidor. Fue divulgada públicamente en octubre de 201...

opencast-CVE-2021-43821-env

opencast-CVE-2021-43821-env Entorno de la vulnerabilidad de divulgación de información sensible cve-2021-43821 de opencast Artículo de reproducción: https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Permitiendo potencialmente a un atacante leer cierta información en Check Point Security Gateways una vez conectados a internet y con remote Access VPN o Mobile Access Software Blades habilitadas. Hay disponible un parche de seguridad que mitiga esta vulnerabilidad. PRIMERO: NO SOY...