5938 matches found
go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset
CVE-2026-67822 — Desbordamiento de búfer de pila en wifiSSIDset de Tenda W6-S PoC PoC complementario del artículo de Hunt-Benito "GO sin límites: CVE-2026-67822 — Desbordamiento de pila en el manejador de formularioswifiSSIDset de Tenda W6-S". CVE-2026-67822 CVSS 9.8 Crítico, CWE-121 es un...
CVE-2026-92249
The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...
CVE-2026-92249
Qi Addons For Elementor (WordPress plugin) versions up to and including 1.11 are vulnerable to Reflected DOM-Based Cross-Site Scripting via the s search parameter, caused by insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts that execute ...
CVE-2026-92249 Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter
The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...
EUVD-2026-82762
The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...
toxy
toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...
CP-XR-DE21-S--4G-Router-Vulnerabilities
CP-XR-DE21-S--4G-Router-Vulnérabilités Ce rapport concerne la CVE-2025-44039 réservée pour la vulnérabilité UART du routeur attribuée au découvreur Yashodhan Vivek Mandke. Veuillez télécharger le rapport pdf dans ce repositoy...
Johnny-You-Are-Fired
Johnny-You-Are-Fired Artefactos para la publicación USENIX | Artículo completo aquí Resumen OpenPGP y S/MIME son los dos estándares principales para cifrar y firmar digitalmente correos electrónicos. Se supone que las firmas digitales garantizan la autenticidad e integridad de los mensajes. En es...
Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257
Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257...
EUVD-2026-80501
In the Linux kernel, the following vulnerability has been resolved: media: airspy: use vb2videounregisterdevice on disconnect to fix NULL deref airspydisconnect clears s-udev under v4l2lock, but airspystopstreaming unconditionally calls airspyctrlmsg and airspyfreestreambufs afterwards. If a...
EUVD-2026-79944
The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...
CVE-2021-3156
Exploit Chain Deep-Dive: CVE-2021-3156 Baron Samedit Autor: IJ Baig Fecha: 7 de julio de 2026 1. CVE ID, Versiones afectadas y confirmación de compilación CVE ID: CVE-2021-3156 Tipo de vulnerabilidad: Desbordamiento de búfer basado en montón Rango de versiones afectadas: Versiones heredadas de...
CVE-2025-42957-SAP-S-4HANA-Under-Siege
CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – ¿Qué sucedió? En agosto de 2025, la plataforma ERP insignia de SAP, S/4HANA , fue descubierta con una vulnerabilidad en uno de sus módulos de función habilitados para RFC. Los atacantes que solo poseen acceso de bajos privilegios pueden inyectar código...
CVE-2026-45447
🚨 CVE-2026-45447 - Critical OpenSSL Use-After-Free Vulnerability Heap Use-After-Free in PKCS7verify allowing memory corruption, crashes, and potential remote code execution. 📖 Executive Summary CVE-2026-45447 is a critical vulnerability in OpenSSL's PKCS7 verification functionality. The flaw exis...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: block: Fixed the issue of iterating over an empty bio with bioforeachfolioall. If the bio contains no data, biofirstfolio calls pagefolio using a NULL pointer, resulting in a buffer overflow error. We’ve moved the test that check...
Astra Linux – Vulnerability in nss, Thunderbird
Versions of NSS Network Security Services prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications that use NSS to handle signatures encoded within CMS, S/MIME, PKCS \7, or PKCS \12 are likely to be affected. Applications that...
Linux Distros Unpatched Vulnerability : CVE-2026-90461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...
CVE-2026-71801
An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...
CVE-2026-71801
s-pms SPMS-Server through v1.0 contains a hardcoded default access token secret in its core configuration file that is not overridden or removed in the production environment profile. This allows a remote, unauthenticated attacker to locally forge valid administrative session tokens, completely b...