pev

readpe pev se ha movido a @mentebinaria/readpe y tiene un nuevo mantenedor. :...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

CVE-2023-6553

CVE-2023-6553 Debido a una declaración include incorrecta en el plugin «Backup Migration», un atacante puede lograr RCE Resumen del CVE El plugin Backup Migration para WordPress es vulnerable a la ejecución remota de código en todas las versiones hasta la 1.3.7 inclusive, a través del archivo...

zend-crypt

zend-crypt Repositorio abandonado 2019-12-31 Este repositorio se ha movido a laminas/laminas-crypt. Zend\Crypt proporciona soporte para algunas herramientas criptográficas. Algunas de las características disponibles son: cifrar-luego-autenticar usando cifrados simétricos el paso de autenticación ...

CVE-2026-87799: Improper Link Resolution Before File Access

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-78938

CVE-2026-78938 — Confusión de tipos en CheckMaps con migración de instancias en V8 TurboFan Análisis de causa raíz y exploit para CVE-2026-78938, una confusión de tipos en la eliminación de cargas de TurboFan en V8 que se corrigió en Chrome 152.0.7977.64 V8 15.2.124.18. El fallo se reportó como...

CVE-2026-82841

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a...

EUVD-2026-87887

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a...

WordPress UpdraftPlus: WP Backup & Migration Plugin plugin 2.23.8-2.26.8.25 - Subscriber+ Remote Storage Credential Disclosure vulnerability

Subscriber+ Remote Storage Credential Disclosure vulnerability discovered by Jakub Herman in WordPress Plugin UpdraftPlus versions 2.23.8-2.26.8.25...

CVE-2026-82841 UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a...

CVE-2026-82841

The UpdraftPlus: WP Backup & Migration Plugin for WordPress (versions before 1.26.8 and before 2.26.8.26 ) contains a vulnerability where it fails to perform a capability check in a routine that outputs stored remote storage settings. When a site is left in a specific post-migration state , this ...

WordPress UpdraftPlus: WP Backup & Migration Plugin plugin 1.23.8-1.26.7 - Subscriber+ Remote Storage Credential Disclosure vulnerability

Subscriber+ Remote Storage Credential Disclosure vulnerability discovered by Jakub Herman in WordPress Plugin UpdraftPlus versions 1.23.8-1.26.7...

CVE-2026-82841 UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a...

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Subida de archivos arbitraria sin autenticación → RCE PoC para CVE-2026-1357 CVSS 9.8 Crítico, CWE-434: una subida de archivos arbitraria sin autenticación en el plugin WPvivid Backup & Migration para WordPress que conduce a la ejecución remota...

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass dos métodos para obtener el contenido de la flag: 1. copiarlo desde el host al directorio montado del contenedor; 2. usar una reverse shell para obtenerlo;...

SUSE CVE-2026-98106

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio migrated to system memory by a CPU fault can remain reachable through the raw-PFN eviction path until migration finalization drops the source reference...

DEBIAN-CVE-2026-98106

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio migrated to system memory by a CPU fault can remain reachable through the raw-PFN eviction path until migration finalization drops the source reference...

CVE-2026-98106

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio migrated to system memory by a CPU fault can remain reachable through the raw-PFN eviction path until migration finalization drops the source reference...

UBUNTU-CVE-2026-98106

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio migrated to system memory by a CPU fault can remain reachable through the raw-PFN eviction path until migration finalization drops the source reference...

CVE-2026-98106 drm/pagemap: Prevent double migration of device pages

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio migrated to system memory by a CPU fault can remain reachable through the raw-PFN eviction path until migration finalization drops the source reference...