9823 matches found
CVE-2021-26084
CVE-2021-26084 CVE-2021-26084,Atlassian Confluence OGNL注入漏洞 Atlassian Confluence 是企业广泛使用的维基系统,其部分版本中存在OGNL 表达式注入漏洞。攻击者可以通过漏洞,不需要任何用户的情况下在目标Confluence 中执行任意代码。 queryString参数执行任意命令...
CVE-2022-24086-RCE
CVE-2022-24086-RCE CVE-2022-24086 RCE Descripción Las versiones 2.4.3-p1 y anteriores y 2.3.7-p2 y anteriores de Adobe Commerce están afectadas por una vulnerabilidad de validación de entrada incorrecta durante el proceso de pago. La explotación de este problema no requiere interacción del usuari...
CVE-2022-24086
CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...
DNS-Mayhem-CVE-2026-41096-Deep-Dive
DNS-Mayhem-CVE-2026-41096-Deep-Dive In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams. Overview CVE‑2026‑41096 i...
CVE-2024-34102
CVE-2024-34102 ★ Gracias a @th3gokul, Sanjaith3hacker, Chocapikk por el código base original. ★ Descripción CVE-2024-34102 : Vulnerabilidad XXE en Adobe Commerce Descripción: Las versiones de Adobe Commerce 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 y anteriores están afectadas por una vulnerabilidad de...
CVE-2023-35674
描述 CVE-2023-35674 是一个存在于 Android Framework 中的高危零日安全漏洞。该漏洞允许攻击者无需用户交互或额外执行权限即可提升自身权限。 该漏洞出现在 Android Framework 处理应用程序包缓存文件的方式中。攻击者可以利用该漏洞修改应用程序的缓存文件以执行恶意代码。 该漏洞于 2023 年 8 月 22 日报告给 Google,Google 于 2023 年 8 月 2 日发布了修复更新。 攻击者可以利用该漏洞在 Android 设备上安装恶意软件、窃取个人信息或控制设备。 关于 CVE-2023-35674 漏洞的更多细节: 类型: 零日...
CVE-2023-7028
CVE-2023-7028 | Toma de control de cuenta en GitLab Descargo de responsabilidad Este código es una prueba de concepto de la vulnerabilidad. No animo a nadie a usarlo en instancias de GitLab que no le pertenezcan. Esta herramienta ha sido desarrollada únicamente con fines de investigación y...
CVE-2023-7028
CVE-2023-7028 Gitlab CVE-2023-7028: Toma de control de cuenta mediante restablecimiento de contraseña sin interacción del usuario Una vulnerabilidad crítica en GitLab CE/EE CVE-2023-7028 puede ser explotada fácilmente por atacantes para restablecer las contraseñas de las cuentas de usuario de...
CVE-2023-23397
CVE-2023-23397 Prueba de concepto Este es un exploit de prueba de concepto PoC para CVE-2023-23397, una vulnerabilidad en el cliente de Windows Microsoft Outlook. Requisitos previos Python 3 paquete pywin32 Cómo usar Windows 1. Instale el paquete pywin32 requerido ejecutando pip install pywin32. ...
CVE-2026-75745
Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...
CVE-2026-19480
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
EUVD-2026-84799
Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-81995
Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to arbitrary code execution in the context of the current user. An attacker with high privileges can exploit this issue without requiring any user interaction. The vulnerability has...
EUVD-2026-84767
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
CVE-2026-19480
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to a Security feature bypass . An attacker could exploit this flaw to bypass security measures and gain unauthorized write access . Notably, exploitation of this issue does not re...
CVE-2026-19480 CAI Content Credentials | Improper Input Validation (CWE-20)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
CVE-2026-82008
Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...
CVE-2026-75723
Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...
EUVD-2026-84667
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
EUVD-2026-84664
Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...