CVE-2020-14883

http://myq-x.remore:8090/index.php?m=WebServiceMgmt::invoke&p="d":"\\m\":"Wsf\\\\Win\\\\Firewall::delete\","\\p\":"----\\\"|ipconfig+/allC:\\\\Windows\\\\system32\\\\spool\\\\drivers\\\\1.txt||----","\\id\":"1","\\pwd\":"","s":"b75c29ef4a5a3d600d96732b3c5cbed1"...

CVE-2023-33781

CVE-2023-33781 Descripción Se descubrió que D-Link DIR-842V2 v1.0.3 permite a un usuario ejecutar un binario arbitrario al conectarse a telnet. Esta vulnerabilidad se puede activar mediante la funcionalidad de copia de seguridad/restauración. Prueba de concepto...

CVE-2025-8714-POC

CVE-2025-8714-POC PoC de RCE en PostgreSQL — CVE-2025-8714 PoC de Ejecución Remota de Código en PostgreSQL — CVE-2025-8714 pgdump Reverse Shell Este repositorio presenta una prueba de concepto PoC para la vulnerabilidad crítica CVE-2025-8714 que afecta a versiones PostgreSQL anteriores a: 17.6,...

EUVD-2026-83811

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Performing a manipulation of the argument QUERYSTRING results in command injection. The attack is possible to be carried o...

RHEL 9 : redis:7 (RHSA-2026:69521)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69521 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

RHEL 8 : redis:6 (RHSA-2026:69533)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69533 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

RHEL 8 : redis:6 (RHSA-2026:69542)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69542 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

CVE-2026-15801

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...

RHEL 8 : redis:6 (RHSA-2026:69534)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69534 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

CVE-2026-92574: Execution with Unnecessary Privileges

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, nonewprivs, and seccomp state from the checkpoint instead ...

CVE-2026-94099: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Performing a manipulation of the argument QUERYSTRING results in command injection. The attack is possible to be carried o...

CVE-2017-0261

CVE-2017-0261 y análisis de la muestra de explotación 0x01 Descripción de la vulnerabilidad Causa: al abrir un documento de Office, FLTLDR.EXE se utiliza para procesar el archivo EPS incrustado que contiene la vulnerabilidad. Este archivo está escrito en lenguaje PostScript y puede ser explotado...

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808 es una vulnerabilidad de Referencia Directa a Objetos Insegura IDOR encontrada en la funcionalidad de Backup & Restore de la Unidad de Gestión del Sistema SMU de Hitachi NAS HNAS. Esta vulnerabilidad afecta a las versiones de SMU anteriores a 14.8.7825.01. Explotación...

EUVD-2026-83741

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

CVE-2020-24955

CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Escalada de privilegios locales Las versiones de SUPERAntiSpyware Professional X Trial anteriores a la 10.0.1206 son vulnerables a la escalada de privilegios locales porque permiten a usuarios sin privilegios restaurar archivos en...

SparstanBoogie

SparstanBoogie se probó, según se informa, en iOS/iPadOS 15.2 - 16.7 RC 20H18 y 17.0; sin embargo, las pruebas se han realizado hasta 26.1 26.1. También se agradece cualquier prueba en dispositivos por encima o por debajo de lo informado, ya que podría volver a aparecer en dispositivos más nuevos...

MSSQL-Analysis-Coerce

MSSQL Analysis Services - Autenticación Forzada Una técnica para obligar a un Windows SQL Server a autenticarse en una máquina arbitraria. Esta prueba de concepto está coescrita por: Podalirius: Worty: Prueba de concepto Para provocar la autenticación como cuenta de máquina local, necesitamos...

CVE-2023-22518

CVE-2023-22518 Exploit para Confluence CVE-2023-22518 backup-restore RCE Endpoint POST /setup/setup-restore.action Requiere un inicio de sesión válido y derechos de administrador o un bypass de autenticación Archivos xmlexport-20231127-071916-1.zip – copia de seguridad vacía de Confluence...

CVE-2026-64824-PoC

CVE-2026-64824 — Path traversal por enlace simbólico en la copia de seguridad y restauración de Home Assistant Core → RCE CVSS 8.4 Crítico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Un atacante autenticado admin sube un tar de copia de seguridad manipulado. La ruta de restauración extrae el...

cve-2025-66398

CVE-2025-66398 — PoC de RCE en Signal K Server 📜 Descripción CVE-2025-66398 es un problema del Servidor Signal K donde un atacante no autenticado puede envenenar el estado de restauración del servidor a través de /skServer/validateBackup, luego secuestrar la configuración mediante /skServer/resto...