CVE-2024-32369

CVE-2024-32369 Descripción: Vulnerabilidad de inyección SQL en HSC Cybersecurity HSC Mailinspector v.5.2.17-3 permite a un atacante remoto obtener información sensible mediante un payload manipulado en los parámetros start y limit en el componente mliWhiteList.php. Versiones: Descubierta en HSC...

CVE-2026-93385

A flaw was found in Google Chrome. A remote attacker could exploit an information leak vulnerability in the Paint component by enticing a user to visit a specially crafted HTML page. This could allow the attacker to obtain sensitive information from the user's browser...

CVE-2024-42658

CVE-2024-42658 CVE-2024-42658 Un problema en el router wifi wishnet Nepstech NTPL-XPON1GFEVN v1.0 permite a un atacante remoto obtener información sensible a través del parámetro cookies CVE-2024-42658: Resumen: Una vulnerabilidad en el router wifi wishnet Nepstech NTPL-XPON1GFEVN v1.0 permite a ...

CVE-2026-93383

A flaw was found in Google Chrome. This vulnerability, an information leak in the Permissions component, allows a remote attacker to leak cross-origin data. Exploitation occurs when a user visits a specially crafted HTML page, leading to unauthorized disclosure of sensitive information...

CVE-2026-93379

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the Object Request Broker ORB component allows a remote attacker to bypass site isolation. By crafting a malicious HTML page, an attacker can exploit this flaw, potentially leading to unauthorized access to sensitive...

CVE-2026-26719

Descripción Resumen Existe una vulnerabilidad de Cross‑Site Scripting almacenado en xxl-job-admin JobInfoController.java donde el parámetro addressList acepta JavaScript codificado en URL sin sanitizar. El payload se almacena y posteriormente se ejecuta en los navegadores de los usuarios, lo que...

io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

A flaw was found in Netty, an asynchronous network application framework. When processing malformed domain names in DNS packets, the DNS record decoder fails to release allocated memory. This vulnerability allows an unauthenticated remote attacker to incrementally leak direct memory, eventually...

CVE-2024-23742

CVE-2024-23742 Un problema en Loom hasta la versión 0.196.1 en macOS permite a un atacante remoto ejecutar código arbitrario a través de la configuración RunAsNode y enableNodeClilnspectArguments. Con esta herramienta, podemos comprobar si la aplicación es vulnerable: Después de la validación,...

CVE-2025-22963

Descripción general Vulnerabilidad de falsificación de petición en sitios cruzados CSRF en versiones de Teedy = v1.11 permite a atacantes remotos forzar a un usuario final a cambiar su información de usuario nombre de usuario, contraseña, etc... en la aplicación web en la que está autenticado...

CVE-2026-68956

Erlang/OTP SSH is vulnerable to unbounded session channel allocation when an authenticated remote attacker repeatedly opens session channels that are never assigned a shell, exec, or subsystem handler. The root cause is that ssh_connection:handle_msg/4 unconditionally stores a #channel{} record i...

CVE-2026-93952

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server para Windows 0.1 permite a atacantes remotos provocar una denegación de servicio mediante una solicitud HTTP para el nombre de un dispositivo MS-DOS. Referencia externa en https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez aka @alt3kx...

CVE-2024-56116

CVE-2024-56116 Descripción sugerida Una vulnerabilidad de Cross-Site Request Forgery en Amiro.CMS anterior a la versión 7.8.4 permite a atacantes remotos crear una cuenta de administrador. Tipo de vulnerabilidad CWE-352 | Cross-Site Request Forgery CSRF Vendedor del producto Amiro.CMS...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. id: CVE-2020-3187...

ROS-20260922-73-0133

The vulnerability in Python-Django is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0056

The vulnerability in Tomcat10 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0011

The vulnerability in gstreamer1-plugins-bad-free is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260922-73-0053

The vulnerability of the chapservercomputehash function in the drivers/target/iscsi/iscsitargetauth.c module of the Linux kernel’s TCM driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0112

The vulnerability in the 389-ds-base is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

USN-8797-1 gst-plugins-base1.0 vulnerability

It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote attacker could possibly use this issue to execute arbitrary code if it opened a specially crafted file...