CVE-2024-27686

Vulnerabilidad de Denegación de Servicio en MikroTik RouterOS 📌 Descripción Este documento describe una vulnerabilidad de Denegación de Servicio DoS encontrada en ciertas versiones de MikroTik RouterOS. La vulnerabilidad se debe a un manejo insuficiente de solicitudes SMB manipuladas. Un atacante...

EUVD-2026-91986

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setupdocumentcontentlist/gstrdupprintf of the file backend/epub/epub-document.c of the component EPUB File Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely...

CVE-2023-33768

CVE-2023-33768 Descripción La verificación incorrecta de la firma del firmware durante el proceso de Actualización del Firmware del Dispositivo del Belkin Wemo Smart Plug WSP080 v1.2 permite a los atacantes causar una Denegación de Servicio DoS mediante un archivo de firmware manipulado...

CVE-2023-46451

CVE-2023-46451 Descripción sugerida Sourcecodester Best courier management system v1.0 es vulnerable a Cross Site Scripting XSS en el campo de cambio de nombre de usuario. Información adicional Aquí actualizo el video POC en YouTube: https://youtu.be/f8B3m5YfqI Tipo de Vulnerabilidad Cross Site...

CVE-2025-55184-POC-Expolit

🔥 Herramienta de Explotación Avanzada CVE-2025-55184 Marco de Explotación Profesional de Denegación de Servicio DoS para Componentes del Servidor React "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Inicio Rápido • 📖 Documentación • 💻 Características • ⚠️ Aviso Legal 🎯 Acerca de CVE-2025-55184...

CVE-2023-30092

CVE-2023-30092 Todos los detalles sobre CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Enlace del software: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Tipo de vulnerabilidad: Inyección SQL Componente afectado: Parámetro QTY Impacto...

CVE-2018-19410-POC

CVE-2018-19410-POC Prueba de concepto para la vulnerabilidad CVE-2018-19410 Detalles PRTG Network Monitor Versión: 18.2.39.1661 y anteriores Nivel de gravedad: Alto Impacto: Bypass de autenticación, Autorización inadecuada, Inclusión de archivos locales Vector de acceso: Remoto La vulnerabilidad...

CVE-2022-4944

「💥」CVE-2022-4944 Descripción Se ha encontrado una vulnerabilidad clasificada como problemática en kalcaddle KodExplorer hasta la versión 4.49. Afecta a una parte no especificada. La manipulación conduce a cross-site request forgery CSRF. Esta vulnerabilidad está identificada de forma única como...

CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 Se ha encontrado una vulnerabilidad, clasificada como crítica, en SourceCodester Food Ordering Management System 1.0. Se ve afectada una función desconocida del componente Registration. La manipulación del argumento username conduce a una...

CVE-2025-25964

CVE-2025-25964: Inyección SQL en School Information Management System v1.0 Introducción En el panorama digital actual, la inyección SQL SQLi sigue siendo una de las vulnerabilidades más comunes y peligrosas encontradas en aplicaciones web. Esta publicación de blog analiza una vulnerabilidad críti...

CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...

The vulnerability of the Shtab project and task management service, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the software for centralized printer and MFP supervision, related to inconsistencies in responses to incoming requests, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

The vulnerability of the “Tekon” SCADA system, related to the incorrect assignment of permissions for critical resources, allows for the increase of its privileges.

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the TrueConf Server software, related to deficiencies in the authentication process, allows a perpetrator to obtain a token with administrator privileges.

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...