CVE-2021-44909

CVE-2021-44909 Título del Exploit: orangescrum 1.8.0 - Ejecución Remota de Comandos RCE no autenticado Fecha: 03/12/2021 Página del proveedor: https://www.orangescrum.org/ Enlace del software: https://github.com/Orangescrum/orangescrum Versión: 1.8.0 Probado en: Windows 10 x64 usando XAMPP 7.4.23...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS XSS Reflejado v3.2.3 Autor: Sergio Descripción: Una vulnerabilidad de cross-site scripting XSS reflejado en el proceso de conexión de la instalación de Evolution v.3.2.3 permite a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en el...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS XSS Reflejado v3.2.3 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross-site scripting XSS reflejado en el proceso de instalación de evolution v.3.2.3, opciones de administración, permiten a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulad...

CVE-2023-43876-October-CMS-Reflected-XSS---Installation

October CMS Reflected XSS v3.4.16 Author: Sergio Description: Cross-Site Scripting XSS vulnerabilitiy in installation of October v.3.4.16 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field. Attack Vectors: A vulnerability in the...

CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation

Cmsmadesimple CMS XSS Reflejado v2.2.18 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross-Site Scripting XSS en la instalación de cmsmadesimple v.2.2.18 permiten a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en el Nombre de la Base de...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 Stored XSS Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in installation of PluckCMS v.4.7.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the cont1 and cont2 parameters in the installation process- Website...

CVE-2026-73709 Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacke...

CVE-2026-73709

HPE Networking Fabric Composer has a vulnerability in its underlying operating system that allows an unauthenticated adjacent attacker to execute arbitrary commands on the host. According to the CVELIST entry, the vulnerability is specifically tied to the installation process . Exploitation requi...

CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of servi...

CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of servi...

CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process classified as CWE-494 (Code Download Without Integrity Check), allowing an attacker to cause execution of untrusted code. A successful exploit may lead to code execution, escalation of privileges, data tampering, infor...

EUVD-2026-66099

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of servi...

[SECURITY] Fedora 44 Update: openqa-5^20260604git6376095-3.fc44

openQA is a testing framework that allows you to test GUI applications on one hand and bootloader and kernel on the other. In both cases, it is difficult to script tests and verify the output. Output can be a popup window or it can be an error in early boot even before init is executed. openQA is...

Astra Linux – Vulnerability in freeipa

A flaw was identified in the FreeIPA API audit; it sends the entire FreeIPA command line to journalctl. As a result, during the FreeIPA installation process, administrative user credentials—including the administrator’s password—are inadvertently leaked into the journal database. In the worst-cas...

PT-2026-50655

It was discovered that Dolibarr incorrectly handled user-supplied database name values during installation. A remote attacker could possibly use this issue to execute arbitrary code...

Malicious code in mozautomation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 26d0e7dfb965969f23786d4bde7d70e597b83df522434aea471171d48442cd12 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Canon My Image Garden 安全漏洞

Canon My Image Garden is a photo management and printing software developed by the Japanese company Canon. Versions of Canon My Image Garden 3.6.8 and earlier contained security vulnerabilities. These vulnerabilities were due to improper handling of symbolic links in the installation process, whi...

CVE-2026-7365

IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...

Synology Assistant 访问控制错误漏洞

Synology Assistant is a network storage device discovery and management tool provided by the Chinese company Synology. Versions of Synology Assistant prior to 7.0.6-50085 contained a access control vulnerability caused by a source verification error. This vulnerability could allow local users to...

EUVD-2025-209932

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...