Exploração

abraxas/openmeetings-kms-unauth

Apache OpenMeetings 9.1.0 - High - Remote - Unauth KMS - docs docker publishes Kurento JSON-RPC on 8888

abraxas/openmeetings-nettest-ping-dos

Apache OpenMeetings 9.1.0 - High - Remote - DoS leftover - unauth NetTest ping POST reads body to EOF

abraxas/openmeetings-remember-me-password

Apache OpenMeetings 9.1.0 - High - Remote - ATO - remember-me cookie replay authenticates without password

abraxas/openmeetings-soap-user-rights

Apache OpenMeetings 9.1.0 - High - Remote - Privilege leftover - SOAP POST /user copies UserDTO.rights including ADMIN

abraxas/openmeetings-soap-otp-skip

Apache OpenMeetings 9.1.0 - High - Remote - 2FA skip - SOAP/REST password login skips TOTP

abraxas/openmeetings-stale-install-admin

Apache OpenMeetings 9.1.0 - High - Remote - Privilege leftover - stale /install wizard inserts second ADMIN

abraxas/openmeetings-wb-fileid-idor

Apache OpenMeetings 9.1.0 - High - Remote - IDOR - WHITEBOARD fileId plant then room file resource serves bytes

abraxas/qemu-colo-l4-oob

QEMU 11.1.2 - Alta - Local/Remoto - OOB - Estouro de heap L4 IPv4 curto no filtro-rewriter do COLO

abraxas/qemu-nvme-sgl-bar

QEMU 11.1.2 - Alta - Local - UAF - NVMe SGL span na BAR0 incompleto CVE-2021-3929

abraxas/qemu-xhci-complete-uaf

QEMU 11.1.2 - Alta - Local - UAF - xhci_complete resquício do CVE-2026-17588 doorbell DMA

abraxas/vbox-guestctrl-copyfrom-dotdot

VirtualBox 7.2.20 - High - Local - File write - Guest Control copy-from DOTDOT

abraxas/vbox-hgcm-ssm-cparms

VirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap

abraxas/vbox-lsilogic-sas-config

VirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay

abraxas/vbox-ovf-href-dest-escape

VirtualBox 7.2.20 - High - Local - File write - OVF href dest escape

abraxas/vbox-ovf-nat-tftp-prefix

VirtualBox 7.2.20 - High - Local - File read - OVF NAT TFTP empty prefix

abraxas/vbox-vmdk-sparse-extent

Oracle VM VirtualBox 7.2.20 - High - Local - File read - VMDK sparse FLAT extent path join

oscerd/cve-2026-78162

Reprodutor de prova de conceito executável para CVE-2026-78162, demonstrando desserialização Java não autenticada no Apache Camel camel-hazelcast em…