p4wned

P4WNED CVE-2026-6043 Herramientas de investigación de seguridad de Perforce Helix Core y plantillas de nuclei. Artículo de investigación: https://morganrobertson.net/p4wned/ Lea el artículo para obtener todos los detalles. Solo para objetivos autorizados. Úselo en sus propios servidores o con...

Code Injection in Perforce Helix Core (CVE-2026-6902)

Executive Summary In this article, we disclose our latest findings we made on Perforce protocol P4 Helix Core between command line client and server, and reveal how a threat actor could leverage it to conduct attacks. This security issue affects P4 Helix Core before P4 Helix Core 2025.2 Patch 2,...

CVE-2026-6902

CVE-2026-6902 affects the Command-Line Client in Perforce P4 Server (Helix Core). The vulnerability is described as a code-injection issue in the Command-Line Client prior to the 2025.2 Patch 2 release, with fixes implemented in P4 Server to address the risk. The connected documents identify the ...

Perforce Helix Core Server 安全漏洞

Perforce Helix Core Server is a centralized version control server offered by Perforce Corporation, designed for managing large-scale code and digital assets. Versions of Perforce Helix Core Server prior to 2026.1 contained security vulnerabilities. These vulnerabilities stemmed from insecure...

CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

EUVD-2021-15620

Malware in sbrugna...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via the auto-generation feature...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via a shutdown feature...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via the auto-generation feature...

Perforce Helix Core 安全漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce. A security vulnerability exists in Perforce Helix Core prior to version 2024.1 Patch 2, which stems from the best fit parameter containing a parameter injection vulnerability...

Perforce Helix ALM Security Vulnerability

Perforce Helix ALM is an application lifecycle management software from Perforce. A security vulnerability exists in Perforce Helix ALM versions prior to 2024.2.0 that stems from the presence of local command injection...

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

Microsoft discovered, responsibly disclosed, and helped remediate four vulnerabilities that could be remotely exploited by unauthenticated attackers in Perforce Helix Core Server “Helix Core Server”, a source code management platform largely used in the videogame industry and by multiple...

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

Microsoft discovered, responsibly disclosed, and helped remediate four vulnerabilities that could be remotely exploited by unauthenticated attackers in Perforce Helix Core Server “Perforce Server”, a source code management platform largely used in the videogame industry and by multiple...

Perforce Software Perforce Helix Resource Management Error Vulnerability

Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A resource management error vulnerability exists in Perforce Software Perforce Helix versions prior to 2023.2, which stems from a vulnerability that...

PT-2023-7827 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2023.2 Description: An arbitrary code execution issue was discovered, resulting in privilege escalation. This issue allows a remote attacker to execute arbitrary code with system account privileges. The...

Perforce Software Perforce Helix Resource Management Error Vulnerability

Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A resource management error vulnerability exists in Perforce Software Perforce Helix Core prior to version 2023.2, which stems from a feature that ca...

Perforce Software Perforce Helix Code Injection Vulnerability

Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A code injection vulnerability exists in Perforce Software Perforce Helix Core versions prior to 2023.2. An attacker exploiting this vulnerability...

Perforce Software Perforce Helix Resource Management Error Vulnerability

Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A resource management error vulnerability exists in Perforce Software Perforce Helix Core prior to version 2023.2, which stems from a vulnerability...

CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...