Alertas de Seguridad de la Información

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34103] Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subti…

Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subtitles.php (line 16): SELECT id, filename, extension, type FROM files where id = '\".$_GET['id'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34104] Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in des…

Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='\".$_GET['name'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34105] Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in trans…

Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where id = '\".$_GET['id'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34106] Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.ph…

Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec(\"php jobs/subtitle_rendering.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to the id parameter to execute arbitrary OS commands on the server.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34107] Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.ph…

Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34108] Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (li…

Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (line 15) without sanitization: exec(\"php jobs/text.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34099] Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_i…

Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info.php (line 16): SELECT * FROM jobs where id = '\".$_GET['id'].\"'. No authentication is required. An unauthenticated attacker can perform error-based SQL injection to extract the database version, current user, schema names, and table contents.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-34100] Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media…

Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, duration, owner, private FROM files where id = '\".$_GET['id'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.

nvdcriticovulnerabilidad CVSS 9.8 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20217] A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote at…

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could expl…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20243] A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attac…

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit th…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20244] A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attac…

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker c…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-20191] A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arb…

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.  This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files …

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20213] A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attack…

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20214] A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attac…

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit th…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20215] A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attack…

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20216] A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, re…

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A succes…

nvdaltovulnerabilidad CVSS 7.5 NVD

H Crítico vulnerabilidad

01/07/2026

[CVE-2026-58126] PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows…

PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows remote attackers to read and write arbitrary files by exploiting an exposed .NET Remoting TCP service on port 22222 via PGImageExchQueue.exe without any authentication requirement. Attackers can chain the arbitrary file write primitive with DLL hijacking in PGImageExchangeQueueSvc.exe, which loads …

nvdcriticovulnerabilidad CVSS 9.8 NVD

H Crítico vulnerabilidad

01/07/2026

[CVE-2026-58127] PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerE…

PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET WebClient class methods, an unauthenticated remote attacker can read and write arbitrary files on the hos…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-58036] Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med…

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php, includes/User/UserGroupManager.Php.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-57517] Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthe…

Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers can exploit MySQL root privileges obtained via the injection to write arbitrary files using INTO DUMPFILE, enabling deployment of a PHP webshe…

nvdcriticovulnerabilidad CVSS 9.8 NVD