Vulnerabilidades

LangGraph SQLite Checkpoint es una implementación de LangGraph CheckpointSaver que utiliza una base de datos SQLite (tanto síncrona como asíncrona, a través de aiosqlite). Las versiones 3.0.0 e inferiores son vulnerables a inyección SQL a través de la implementación del checkpoint. Checkpoint permite a los atacantes…

FreePBX Endpoint Manager es un módulo para gestionar endpoints de telefonía en sistemas FreePBX. Versiones anteriores a 16.0.96 y 17.0.1 hasta 17.0.9 tienen una contraseña predeterminada débil. Por defecto, este es un valor numérico de 6 dígitos que puede ser forzado por fuerza bruta. (Este es el parámetro…

A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation,…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Uso después de liberar en Microsoft Office Word permite a un atacante no autorizado ejecutar código localmente.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wappointment team Wappointment wappointment allows Stored XSS.This issue affects Wappointment: from n/a through <= 2.6.9.

Verificación incorrecta de firmas criptográficas en el componente de gestión de parches de Ivanti Endpoint Manager anterior a la versión 2024 SU4 SR1 permite a un atacante remoto no autenticado ejecutar código arbitrario. Se requiere interacción del usuario.

Salto de ruta en Ivanti Endpoint Manager anterior a la versión 2024 SU4 SR1 permite a un atacante remoto autenticado escribir archivos arbitrarios fuera del directorio previsto. Se requiere interacción del usuario.

Control inadecuado de los recursos de código gestionados dinámicamente en Ivanti Endpoint Manager anterior a la versión 2024 SU4 SR1 permite a un atacante remoto no autenticado escribir archivos arbitrarios en el servidor, lo que podría llevar a la ejecución remota de código. Se requiere interacción del usuario.

XSS almacenado en Ivanti Endpoint Manager anterior a la versión 2024 SU4 SR1 permite a un atacante remoto no autenticado ejecutar JavaScript arbitrario en el contexto de una sesión de administrador. Se requiere interacción del usuario.

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP (a ZIP containing another ZIP) where the inner archive contains an executable file (e.g. webshell.php). When the application extracts the uploaded archives, the executable may be extracted…

Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt.

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.

An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability.

Se descubrió un problema en Logpoint antes de 7.7.0. Información sensible está expuesta en Procesos del Sistema por un período extendido durante una alta carga de CPU.

Se descubrió un problema en Logpoint antes de 7.7.0. Una política de control de acceso configurada incorrectamente expone información sensible del servicio interno de Logpoint (Redis) a los usuarios li-admin. Esto puede llevar a una escalada de privilegios.

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted…

The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.96. This is due to the plugin exposing an unauthenticated booking processing endpoint (cpabc_appointments_check_IPN_verification) that trusts attacker-supplied payment notifications…

Microsoft SharePoint Online Elevation of Privilege Vulnerability

Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial CyberSecurity for Linux Nodes (any version with anti-virus databases prior to 18.11.2025), and Kaspersky Endpoint Security for Mac (12.0.0.325, 12.1.0.553, and…