CVE-2026-47519

A flaw was found in nvidia-vgpu-software's Virtual GPU vGPU Manager for Linux. A local user with basic privileges can trigger an out-of-bounds read in the kernel-mode driver, accessing memory outside designated boundaries. A successful exploit could allow the attacker to execute arbitrary code,...

opencode-secure

El agente de codificación de IA de código abierto. Instalación YOLO curl -fsSL https://opencode.ai/install | bash Gestores de paquetes npm i -g opencode-ai@latest o bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS y Linux...

CVE-2021-35587

CVE-2021-35587 Descripción - POC para CVE-2021-35587: Vulnerabilidad fácilmente explotable que permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Access Manager. - creado por antx el 14-03-2022. Detalle - Vulnerabilidad en el producto Oracle Access...

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 20 de agosto de 2020 Plugin 0day de Wordpress La vulnerabilidad de elFinder es una vulnerabilidad bien conocida, mi script solo cambia la ruta a "/wp-content/plugins/wp-file-manager/". Deja de pedirme correcciones en el script o cualquier otra cosa. RTFM...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager proporciona una plataforma central para almacenar artefactos de compilación CVE-2024-4956 es una vulnerabilidad de path traversal en Sonatype Nexus Repository manager que permite a un atacante manipular una URL para...

CVE-2020-10199

CVE-2020-10199 Anteriormente, durante una prueba de penetración PT, me encontré con que el entorno objetivo tenía desplegado Nexus Repository Manager. Pasé por algunos obstáculos, pero al final conseguí la shell. Hago un pequeño registro para poder repasarlo fácilmente en el futuro si es necesari...

CVE-2026-79896

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

CVE-2026-12627

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Bug de Cisco: CSCur90888 Título del Exploit : Cisco UCS Manager - 2.21d - Ejecución Remota de Comandos Descripción : Un script CGI no especificado en Cisco FX-OS anterior a 1.1.2 en dispositivos Firepower 9000 y Cisco Unified Computing System UC...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Exploit de Tiny File Manager-2.4.3 Una vulnerabilidad de path traversal en la funcionalidad de carga de archivos en tinyfilemanager.php del Tiny File Manager del proyecto Tiny File Manager = 2.4.6 permite a atacantes remotos con cuentas de usuario válidas cargar archivos PHP...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in the boks_autoregisterd component. A remote attacker with network access to the autoregistration service may trigger memory corruption during client response processing. The vulnerability is asso...

EUVD-2026-90882

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

binfinder

binfinder Encuentra archivos binarios no instalados a través del gestor de paquetes Prerrequisitos Software versión de go = 1.12 versión de docker = 19 Cómo compilar y ejecutar binfinder Compilar $ make build Una vez que la compilación esté completa, puede ejecutar bindfinder ejecutando: $...

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

EUVD-2026-89459

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs...

CVE-2026-97281

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-79898

Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...