3629 matches found
papers
Artรญculos Una prรกctica colecciรณn de mis artรญculos pรบblicos, todos en un solo lugar. Vulnerabilidades de Elevaciรณn de Privilegios en Symantec Altiris Deployment Solution 13048 Publicaciรณn de Exploit-db en...
CVE-2019-0859-1day-Exploit
CVE-2019-0859-1day-Exploit CVE-2019-0859 ไธๆฅๆผๆดๅฉ็จ ็ฎๆ ๆไฝ็ณป็ป๏ผWindows 7 x64 ServicePack1 7601 ่ฏฅๆผๆดๅฉ็จ้่ฆ็ฏๅขๅทฒๅฎ่ฃ 2019ๅนด3ๆๅฎๅ จๆดๆฐใไนๅ็ๆดๆฐๆชๅๅฝๅๆฃๆฅใ ๆผๆดๅฉ็จ็ๅฏ้ ๆงๅนถ้100%ใๆๆถๆผๆดๅฉ็จๆ ๆณๅฎ็พ่ฟ่กใๆญคๆถ่ฏท้่ฏ...
CVE-2023-25690-POC
CVE 2023 25690 - Prueba de Concepto Publicado: 7 de marzo de 2023 Puntuaciรณn base| Confidencialidad| Impacto en la integridad| Impacto en la disponibilidad ---|---|---|--- 9.8| Alto| Alto| Alto Tabla de contenidos Descripciรณn del aviso Desglose de la configuraciรณn vulnerable de Apache Flujo de...
CVE-2020-0041
CVE-2020-0041 ่ฏฅไปๅบๅ ๅซๅฉ็จCVE-2020-0041็ไปฃ็ ๏ผ่ฏฅๆผๆดไบ2019ๅนด12ๆๆฅๅ็ปGoogle๏ผๅนถๅจ2020ๅนด3ๆ็Androidๅฎๅ จๅ ฌๅไธญไฟฎๅคใ ไฝ ๅฏไปฅๅจsandbox/ไธญๆพๅฐๆฒ็ฎฑ้้ธๆผๆดๅฉ็จใๆๅ ณ่ฏฅๆผๆด็ๅๆๅๅฉ็จๆนๆณ่ง https://labs.bluefrostsecurity.de/blog/2020/03/31/cve-2020-0041-part-1-sandbox-escape/ ใ ๅๆ ท๏ผไฝ ๅฏไปฅๅจlpe/ไธญๆพๅฐๆ้ๆๅๆผๆดๅฉ็จใๆญค้จๅ็ๅฉ็จๆนๆณ่ง...
CVE-2007-6638
CVE-2007-6638 March Networks DVR 3204 - Divulgaciรณn de informaciรณn del archivo de registro Publicaciรณn de Exploit-DB en https://www.exploit-db.com/exploits/4797/ Autor Alex Hernandez alias @alt3kx...
ingress-nginx
Ingress NGINX ้ๅฝน ้ๅฝน ๅ ณไบ Ingress NGINX ้ๅฝนไฝ ้่ฆไบ่งฃ็ไฟกๆฏ๏ผ ๅฐฝๅ็ปดๆคๅฐๆ็ปญ่ณ 2026 ๅนด 3 ๆใ ๆญคๅๅฐไธๅๅๅธๆฐ็ๆฌ๏ผไธๅไฟฎๅค้่ฏฏ๏ผไนไธๅฏนไปปไฝๅฏ่ฝๅ็ฐ็ๅฎๅ จๆผๆด่ฟ่กๆดๆฐใ Ingress NGINX ็็ฐๆ้จ็ฝฒไธไผๅๅฝฑๅใ ็ฐๆ้กน็ฎไบง็ฉ๏ผไพๅฆ Helm Chart ๅๅฎนๅจ้ๅ๏ผๅฐ็ปง็ปญๅฏ็จใ Ingress NGINX ๆงๅถๅจ ๆฆ่ฟฐ ingress-nginx ๆพๆฏไธไธช Kubernetes ็ Ingress ๆงๅถๅจ๏ผๅฎไฝฟ็จ NGINX ไฝไธบๅๅไปฃ็ๅ่ด่ฝฝๅ่กกๅจใ ๅจ Kubernetes ๆๆกฃ็ซ็นไธไบ่งฃๆดๅคๅ ณไบ Ingress ็ไฟกๆฏใ ไฝฟ็จ...
CVE-2026-57475
Deloitte AI Assist for Customer had an unauthenticated POST vulnerability on public API endpoints that allowed a remote attacker to perform limited additions to the configuration. These changes were not used by the system. On 2026-03-25, access was restricted and authentication enforced for the e...
CVE-2026-57475
Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration. These additions were not used by the system. On 2026-03-25, AI Assist for Customer restricted network access an...
EUVD-2024-55647
Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers can exploit the lack of input...
CVE-2026-4764 Privilege Escalation in Dialogflow CX via Playbook Import
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...
EUVD-2026-36221
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...
CVE-2026-37709
Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the app/Http/Controllers/Api/UploadedFilesController.php component...
CVE-2026-33583
Exposure of the QKEY used as input into the โOTA-Quantumโ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...
Wordfence Bug Bounty Program Monthly Report โ March 2026
In March 2026, the Wordfence Bug Bounty Program received 1718 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...
Security Bulletin: NVIDIA Merlin - May 2026
NVIDIA has released a software update for NVIDIAยฎ Merlin. To protect your system, clone or update this software to include any commit after March 11, 2026 from the NVIDIA-Merlin/Transformers4Rec GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential...
EUVD-2026-30113
Exposure of the QKEY used as input into the โOTA-Quantumโ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-21023
The vulnerability CVE-2026-21023 affects PackageManagerService prior to SMR Mar-2026 Release 1, enabling local attackers to modify installation restrictions on specific apps. Root cause: insufficient verification of data authenticity in PackageManagerService. Impact per the sources: trivial local...
Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack
Checkmarx has disclosed that its ongoing investigation tied to the supply chain security incident has revealed that a cybercriminal group published data related to the company on the dark web. "Based on current evidence, we believe this data originated from Checkmarx's GitHub repository, and that...
CVE-2026-40873 mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenames
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the Quarantine details modal injects attachment filenames into HTML without escaping, allowing arbitrary HTML/JS execution. An attacker can deliver an email with a crafted attachment name s...
Security Updates for Microsoft Windows Admin Center in Azure Portal (March 2026)
The Microsoft Windows Admin Center in Azure Portal installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Elevation of Privilege vulnerability in Windows Admin Center in Azure Portal CVE-2026-23660 Note that Nessus has not tested for this issue...