1904 matches found
sslnuke
sslnuke -- ¡SSL sin verificación no es seguro! Todos hemos oído una y otra vez que SSL sin verificación no es seguro. Si una conexión SSL no se verifica con un certificado en caché, cualquier atacante puede secuestrarla fácilmente. Así que en 2013, uno pensaría que ya habíamos eliminado este...
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2026-15964-PoC
CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Escalada de privilegios no autenticada mediante cambio de contraseña no verificado en el plugin de WordPress Single Sign On For TNG. | ---|--- Gravedad| Crítico 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Cambio de contraseña no...
CVE-2024-48887-Exploit
CVE-2024-48887-Cambio de Contraseña No Verificado CWE-620 Resumen Una vulnerabilidad de cambio de contraseña no verificado en la interfaz gráfica de Fortinet FortiSwitch que permite a un atacante remoto no autenticado cambiar contraseñas de administrador mediante una solicitud especialmente...
CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-
CVE-2026-22004 – Envenenamiento de punteros de Git LFS Cadena de suministro Código del programa Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...
InfraTest
DO NOT DEPLOY UNLESS FOR LEARNING ABOUT AWS!!! Currently vulnerable to CVE-2024-39689. We need to update Certifi. Check dependabot before deploying. Trusting an unverified Certificate Authority can have major loss of customer trust issues...
CVE-2021-1075
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:45+00:00| seen| https://t.me/hackingAttack/6646 2026-09-02 01:03:20+00:00| seen| https://t.me/hackingAttack/6646...
CVE-2021-31198
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:42+00:00| seen| https://t.me/hackingAttack/8312 2026-09-02 01:03:18+00:00| seen| https://t.me/hackingAttack/8312...
CVE-2022-23131
CVE-2022-23131 Zabbix - Omisión de autenticación SAML SSO Descripción En el caso de instancias donde la autenticación SAML SSO está habilitada no predeterminada, los datos de sesión pueden ser modificados por un actor malicioso, porque un inicio de sesión de usuario almacenado en la sesión no fue...
CVE-2026-82735
creationtimestamp| type| source ---|---|--- 2026-09-01 04:20:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dxuowsh3junbh...
-CVE-2024-24450-
-CVE-2024-24450- probar más tarde para un PoC hipotético para CVE-2024-24450...
CVE-2026-61641
Wallos is an open-source, self-hostable personal subscription tracker. From version 4.0.0 to before version 4.9.6, Wallos's OIDC login links an incoming OIDC identity to an existing local account by matching the email claim alone, without verifying that the IdP marked that email as verified...
CVE-2026-61641
Wallos (open-source personal subscription tracker) versions 4.0.0 through before 4.9.6 contain an OIDC login flaw where an incoming identity is linked to an existing local account by matching the email claim alone, without verifying the IdP's email_verified attribute. When the configured IdP allo...
CVE-2026-4885
CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...
CVE-2026-82642
creationtimestamp| type| source ---|---|--- 2026-08-30 14:32:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hagiqmntgpznc 2026-08-30 15:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnua7l5x2b...
CVE-2026-18718
Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...
CVE-2025-10952
creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:12+00:00| seen| Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak8ZYRyADH7od6Bkg 2026-08-30 00:00:13+00:00| seen| Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak8ZYRyADH7od6Bkg 2026-08-31 00:00:45+00:00| published-proof-of-concept|...
CVE-2020-9758
creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:07+00:00| seen| Telegram/MG1fInaYoOLF55uFsSl9CgVeAoVLtxwPoLWcWmhrMEUXxw 2026-08-30 00:00:11+00:00| seen| Telegram/MG1fInaYoOLF55uFsSl9CgVeAoVLtxwPoLWcWmhrMEUXxw 2026-08-31 00:00:49+00:00| published-proof-of-concept|...