CVE-2024-38063

CVE-2024-38063 - Vulnerabilidad de ejecución remota de código en TCP/IP de Windows. La ocurrencia de BSOD puede conducir a RCE, mientras que mi código solo causa BSOD. Estoy analizando continuamente el parche y realizando pruebas para lograr la ocurrencia de RCE en el sistema objetivo. Historial ...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle acaba de revelar una nueva vulnerabilidad CVE-2025-61884, el script de detección para esa vulnerabilidad se puede encontrar en este repositorio o originalmente aquí:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Tal como se cita en e...

NetCrackPi

NetCrackPi 此仓库是一个集合下载候选，旨在将你的树莓派打造成一个网络攻击工具（当然仅用于教育目的）。NetCrackPi的功能包括战争驾驶、WEP、WPA、WPA2破解、数据包嗅探、ARP欺骗、中间人攻击、网络入侵检测系统、WPS Pixie-Dust攻击、AP欺骗以及网络审计。 功能特性 网络破解 Airsuite-ng - 包含检测器、数据包嗅探器、WEP和WPA/WPA2-PSK破解与分析工具的软件套装 Wash & Reaver - WPS破解工具 Wifite2 - 网络审计工具 Ettercap - 中间人攻击套件 Airgeddon - 网络审计工具...

PT-2026-92760

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage function. An attacker may cause memory corruption due to an overflow through an adjacent network. Successful exploitation of this vulnerability could result in a loss of confidentiality, integrity, and/or availability...

CVE-2026-78510

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-69418

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73775

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

CVE-2026-69349

CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...

Microsoft Office Outlook Remote Code Execution Vulnerability

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

dotnet: .NET Framework: Denial of Service via network-based buffer overflow

A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service DoS, making the affected system unavailable to legitimate users...

ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm

A flaw was found in ASP.NET Core. An authorized attacker can exploit an incorrect implementation of the authentication algorithm over a network. This vulnerability allows the attacker to elevate their privileges, potentially gaining unauthorized access to sensitive resources or performing actions...

CVE-2026-73911

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

CVE-2026-71036

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-71016

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-70923

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require...

CVE-2026-70875

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70844

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks...

CVE-2026-70805

Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite component: Change Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-62612

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report...