CVE-2022-41445

CVE-2022-41445 Cross Site Scripting en el Sistema de Gestión de Registros de Profesores usando CodeIgnitor Descripción sugerida Una vulnerabilidad de cross-site scripting XSS en el Sistema de Gestión de Registros que usa CodeIgniter 1.0 permite a los atacantes ejecutar scripts web arbitrarios o...

BadOutlook

Bad Outlook Un PoC simple que aprovecha la Interfaz de la Aplicación de Outlook Interfaz COM para ejecutar shellcode en un sistema basado en una línea de asunto de activación específica. Al utilizar el espacio de nombres Microsoft.Office.Interop.Outlook, los desarrolladores pueden representar tod...

getaltname

GSAN - Obtener Nombres Alternativos del Sujeto GSAN es una herramienta que puede extraer Nombres Alternativos del Sujeto SAN encontrados en Certificados SSL directamente desde servidores https, lo que puede proporcionarte nombres DNS subdominios o servidores virtuales. No depende de los registros...

AlmaLinux 9.6 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (ALMALINUX9.6:CLSA-2026:1779827686)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779827686 advisory. - A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...

CVE-2022-25813

CVE-2022-25813: Inyección de Plantillas del Lado del Servidor en FreeMarker en Apache OfBiz Al insertar contenido malicioso en el campo "Subject" de un mensaje, un atacante puede realizar ataques SSTI Server-Side Template Injection, que pueden aprovechar objetos expuestos de FreeMarker para eludi...

CVE-2026-102374

Versions of GestSup prior to 3.2.62 are vulnerable to a stored cross-site scripting (XSS) vulnerability within the IMAP OAuth connector . The root cause is the double-decoding of MIME-encoded email subjects after HTML escaping has already occurred. This allows unauthenticated attackers to send cr...

CVE-2026-54390

CVE-2026-54390 — Explotación masiva de SSTI en Smarty de JTL Shop Formulario de contacto sin autenticación → Asunto del correo → fetch'string:' → RCE Resumen CVE-2026-54390 es una inyección de plantillas en el lado del servidor SSTI crítica CVSS 9.8 y sin autenticación en JTL Shop 5.2.0–5.7.1. El...

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introducción Este script proporciona ejecución remota de código contra GitLab Community Edition CE y Enterprise Edition EE. El CVE es una lectura arbitraria de archivos que te permite extraer el secretkeybase de Rails descargando el archivo secrets.yaml de GitLab. Esto, a su...

CVE-2026-91769

A flaw was found in PHP. This vulnerability allows server impersonation and potential information disclosure during Transport Layer Security TLS connections. When verifying peer certificates, PHP improperly falls back to matching the Common Name CN if no Subject Alternative Name SAN matches the...

CVE-2026-48849-Roundcube-Webmail-Stored-XSS

CVE-2026-48849 - XSS Almacenado, Inyección HTML e Inyección CSS en Roundcube Webmail Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2026-48849 , una vulnerabilidad de Cross-Site Scripting Almacenado XSS, Inyección HTML e Inyección CSS en Roundcube Webmail. La vulnerabilidad...

CVE-2023-49970

CVE-2023-49970 Customer Support System 1.0 - Vulnerabilidad de Inyección SQL en el parámetro "subject" durante la operación "saveticket" Descripción : Existe una vulnerabilidad de Inyección SQL en la versión 1 del Customer Support System. Un atacante malicioso puede ejecutar comandos SQL en la ba...

CVE-2023-49976

CVE-2023-49976 Customer Support System 1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo "subject" en "ticketlist" Descripción : Customer Support System 1.0 es vulnerable a XSS almacenado. Existe una vulnerabilidad XSS en la versión 1 del Customer Support System. Un actor malicioso pue...

Linux Distros Unpatched Vulnerability : CVE-2026-89134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-D...

CVE-2026-89134

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

CVE-2026-89134

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

UBUNTU-CVE-2026-89134

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

CVE-2026-89134 Subject CN name-constraint check bypassed when non-DNS SAN present

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

CVE-2026-89134

The wolfSSL library (version 5.9.2 ) is vulnerable to a Subject CN name-constraint check bypass . The flaw occurs because the CN-as-DNS fallback logic incorrectly checks if any Subject Alternative Names (SAN) are present rather than specifically checking for the absence of a dNSName SAN. Conseque...

CVE-2026-89134 Subject CN name-constraint check bypassed when non-DNS SAN present

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

EUVD-2026-87913

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...