CVE-2026-84652

A flaw was found in Jenkins. When a user authenticates using the "remember me" cookie, Jenkins fails to rotate the session identifier. This oversight allows a remote attacker, who can serve content on the same site as Jenkins, to set a known session cookie in a victim's browser. Consequently, onc...

CVE-2015-8299

knAx20150101 Title: Vulnerabilidad de ejecución remota de código en el software de gestión KNX ETS Category/Abstract: Vulnerabilidad de desbordamiento de búfer Product: ETS Software de Herramientas de Ingeniería Affected versions: ETS 4.1.5 Build 3246 ninguna otra versión probada Fixed in version...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities (CVE-2026-19032, CVE-2026-83557)

Summary Multiple vulnerabilities are found in dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION:...

CVE-2020-14883

http://myq-x.remore:8090/index.php?m=WebServiceMgmt::invoke&p="d":"\\m\":"Wsf\\\\Win\\\\Firewall::delete\","\\p\":"----\\\"|ipconfig+/allC:\\\\Windows\\\\system32\\\\spool\\\\drivers\\\\1.txt||----","\\id\":"1","\\pwd\":"","s":"b75c29ef4a5a3d600d96732b3c5cbed1"...

CVE-2024-21413

CVE-2024-21413 Este script es la Prueba de Concepto PoC de CVE-2024-21413, una vulnerabilidad de seguridad significativa descubierta en Microsoft Windows Outlook que tiene una fuerte puntuación CVSS crítica de 9.8. Nombrada como el error MonikerLink, esta vulnerabilidad permite al atacante ejecut...

CVE-2019-11395

Exploit CVE-2019-11395 🛡️ Acerca de CVE-2019-11395 🕵️ La vulnerabilidad CVE-2019-11395 describe una vulnerabilidad de desbordamiento de búfer en la aplicación de correo electrónico MailCarrier 2.51, que permite la ejecución remota de código. La vulnerabilidad ocurre en los procesos SMTP RCPT TO,...

CVE-2024-29399

CVE-2024-29399 Detalles de la Vulnerabilidad Resumen En Savane v3.13 y anteriores, la falta de validación en los archivos subidos puede permitir una escalada de privilegios. Los servidores web configurados según las instrucciones de instalación son vulnerables a Cross‑Site Scripting XSS. En...

Joomla_CVE_2026_48907

MASTA Escáner CVE-2026-48907 Escáner autónomo de un solo archivo para Joomla! JCE Editor Autor: Alma !CAUTION 🚨 DESCARGO DE RESPONSABILIDAD — LEA ANTES DE USAR ESTA ES UNA HERRAMIENTA DE PRUEBA DE SEGURIDAD INTRUSIVA. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do...

CVE-2026-21858

CVE-2026-21858 RCE PoC environment for n8n 1.120.4 with a Form Trigger workflow and an exploit script. Requirements Docker Docker Desktop on Windows Python 3.x attack side Files Dockerfile — build the n8n vulnerable environment run.bat — run the container Windows workflow.txt — n8n workflow...

CVE-2025-7775

CVE-2025-7775 Vulnerabilidad de desbordamiento de memoria que conduce a ejecución remota de código y/o denegación de servicio en NetScaler ADC y NetScaler Gateway cuando NetScaler está configurado como Gateway servidor virtual VPN, proxy ICA, CVPN, proxy RDP o servidor virtual AAA o NetScaler ADC...

CVE-2026-101007 aaPanel BaoTa Database Backup database.py InputSql os command injection

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...

EUVD-2026-88103

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...

CVE-2026-101007

A vulnerability exists in aaPanel BaoTa up to version 11.8.0 , specifically within the Database Backup Handler component. The flaw is located in the InputSql function of the class/database.py file. By manipulating the Password argument, an attacker can achieve remote os command injection . Public...

CVE-2025-12674

CVE-2025-12674 KiotViet Sync = 1.8.5 - Carga Arbitraria de Archivos No Autenticada 🐚 KiotViet Sync = 1.8.5 - Carga Arbitraria de Archivos No Autenticada 📝 Descripción El plugin KiotViet Sync para WordPress versiones hasta 1.8.5 inclusive es vulnerable a la carga arbitraria de archivos, debido a l...

CVE-2026-59739

A flaw was found in Apache ZooKeeper. This vulnerability allows a remote attacker to discover paths that should be restricted by Access Control Lists ACLs. By registering watches on non-existent paths and then reconnecting after these paths are created with restricted ACLs, the attacker can bypas...

log4j

💻 -h3x0v3rl0rd- Explotando log4j CVE-2021-44228 TryHackMe Solar, Walkthrough git clone https://github.com/n3rdh4x0r/log4j.git 1. Ejecuta log4j.py Esto instalará todas las aplicaciones necesarias e iniciará el servidor LDAP ifconfig tun0 python3 log4j.py 10.8.227.251 2. Añade la IP del atacante al...

CVE-2025-55182-React2Shell-RCE-POC

CVE-2025-55182 - React2Shell RCE Este repositorio documenta la investigación sobre CVE-2025-55182, también conocido como React2Shell, una vulnerabilidad crítica de deserialización insegura en los Componentes del Servidor de React RSC y los frameworks que integran el protocolo RSC Flight,...

CVE-2026-101003

A flaw was found in Mongoose. A remote attacker can trigger a stack-based buffer overflow by sending specially crafted network messages to the MQTT broker component. This flaw could lead to a Denial of Service DoS condition by crashing the application...

CVE-2026-101004

A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the function cleanCache of the file pages/api/cache.js of the component Authentication Guard. The manipulation of the argument token leads to missing authentication. The attack may be...

CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...