CVE-2021-44228

CVE-2021-44228 El 9 de diciembre de 2021 el mundo conoció una nueva falla de seguridad relacionada con Log4J. La puntuación CVSSv3 Common Vulnerability Scoring System de la vulnerabilidad fue evaluada en 10, lo que la convierte en nivel crítico https://nvd.nist.gov/vuln/detail/CVE-2021-44228...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

CyberPower < v2.8.3 - SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to . id: CVE-2024-32736 info: name: CyberPower PDNU" tags: cve,cve2024,cyberpower,sqli,vkev,vuln http: - method: GET path: - "BaseURL/api/v1/confup?mode=&uid=1'%20UNION%20select%201,2,3,4,sqliteversion;--"...

CVE-2020-13259

CVE-2020-13260 PoC de toma de control total de la cuenta en RAD SecFlow-1v Una vulnerabilidad en la interfaz de gestión basada en web de RAD SecFlow-1v podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de falsificación de solicitud entre sitios CSRF en un sistema...

CVE-2022-41272

CVE-2022-41272 En este repositorio, escribiremos brevemente información sobre la vulnerabilidad CVE-2022-41272. La vulnerabilidad existe en el servicio SAP P4 que se ejecuta en el puerto 5NN04. Donde NN es un número de instancia, que puede ser del 00 al 99. Hay funciones de llamada remota que un...

CVE-2023-20052

CVE-2023-20052 Vulnerabilidad de fuga de información CVE-2023-20052 en el analizador de archivos DMG de ClamAV Una vulnerabilidad en el analizador de archivos DMG de ClamAV versiones 1.0.0 y anteriores, 0.105.1 y anteriores, y 0.103.7 y anteriores podría permitir que un atacante remoto no...

cve-2021-1675

〖EXP〗Ladon Impresión de vulnerabilidad de escalada de privilegios CVE-2021-1675 Reproducción http://k8gege.org/p/CVE-2021-1675.html Información básica El 9 de junio, Microsoft publicó el parche de actualización de seguridad de junio, que corrigió 50 vulnerabilidades de seguridad, incluida una...

CVE-2026-2699

CVE-2026-2699 — Progress ShareFile Storage Zones Controller Authentication Bypass Critical Authentication Bypass CVSS 9.8 in customer-managed Progress ShareFile Storage Zones Controller SZC ≤ 5.12.3. 📋 Overview CVE-2026-2699 is a severe authentication bypass vulnerability affecting the web...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343 : Vulnérabilité DoS par suppression RADIUS dans Cisco ISE 🌐 ⚠️ Aperçu 🚨 Faille de déni de service DoS de haute gravité dans Cisco Identity Services Engine ISE ! 💥 Un attaquant distant non authentifié peut planter l'appareil avec des paquets RADIUS conçus. 📅 Divulgué : 5 novembre...

CVE-2026-87425

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

CVE-2026-87425

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

PT-2026-107861

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

CVE-2026-96404

A flaw was found in Gitea. When the web installer is accessible against a database containing existing users, an unauthenticated remote attacker can submit the installation form specifying an existing administrator username. The application issues an authenticated session without verifying the...

CVE-2024-27564

CVE-2024-27564 Description: A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This SSRF vulnerability can be exploited without authentication, making it particularly dangerous. The vulnerable code is in the...

Linux Distros Unpatched Vulnerability : CVE-2026-106026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches...

CVE-2026-79799

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2026-76742

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system...

EUVD-2026-93886

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2026-79797 Improper Access Control in HPE Networking ClearPass Android Client Application

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to...

CVE-2026-76743

A vulnerability exists in the management interface of AOS-S that could allow an unauthenticated remote attacker to circumvent existing authentication controls. This bypass occurs only if certain preconditions outside of the attacker's control are met. Successful exploitation may lead to unauthori...