902318 matches found
glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration
A flaw was found in the GNU C Library glibc DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from...
external_expat-2.1.0_CVE-2022-25313
This repository does not have a README...
CVE-2024-27348
CVE-2024-27348 This is a repository for Apache HugeGraph Remote Code Execution vulnerabilityCVE-2024-27348 Docker docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml services: web: image: vulhub/hugegraph:1.2.0 ports: -...
EUVD-2026-104185
Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...
EUVD-2026-104214
Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...
CVE-2020-25637-libvirt-double-free
CVE-2020-25637 Description A double-free issue occurred in the libvirt API, in versions prior to version 6.8.0, responsible for requesting information about the network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the...
CVE-2019-19654
CVE-2019-19654 Chevereto denial of service - = 3.13.5 Core in the /dashboard/bulk tool. An attacker with an admin account can insert any path. The bulk importer will remove any file and folder it has access to. Basically you can make the website self-destruct. Add job to "import" /var/www/html PO...
CVE-2026-111408
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
CVE-2026-78164 Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers
Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert.x HTTP components. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before...
CVE-2026-78164 Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers
Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert.x HTTP components. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before...
CVE-2026-78164
Apache Camel HTTP producer families (camel-http , camel-http-common , camel-vertx-http , camel-undertow , and camel-netty-http ) are vulnerable to an Information Exposure and Template Injection vulnerability (CWE-1336, CWE-200). The root cause is that these components allow inbound messages to ov...
CVE-2024-1112
CVE-2024-1112 This is a PoC, I wrote for "ResHacker.exe" Heap overflow vulnerability. Usage Execute CVE-2024-1112.py, copy all string at created payload.txt then use it to as parameter to open ResHacker.exe ResHacker.exe $string NOTE: Don't forget the find correct address - You can find full...
papers
Papers A handy collection of my public papers, all in one place. Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db publication at https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An...
CVE-2020-1362
Exploiting an Elevation of Privilege bug in Windows 10 CVE-2020-1362 Exploit memory corruption bug - analysis of CVE-2020-1362 WalletService has fixed Elevation of Privilege bugs in last Patch Tuesday, one of bugs are assigned with CVE-2020-1362. The bug leverage a out-of-bound bug in the service...
CVE-2025-5777-CitrixBleed
CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 is a critical unauthenticated out-of-bounds read in Citrix NetScaler ADC/Gateway Gateway or AAA vServer mode. A single crafted request can dump memory containing...
CVE-2026-78162 Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)
Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies a default Hazelcast JavaSerializationFilterConfig to the instances it creates from its own configuration, a...
CVE-2026-78162
Apache Camel's camel-hazelcast component (specifically camel-hazelcast-starter and camel-quarkus-hazelcast) is vulnerable to CWE-502 Deserialization of Untrusted Data. The root cause is an incomplete fix for CVE-2026-43865 where two configuration paths—ReplicatedHazelcastAggregationRepository#doS...
CVE-2026-78162 Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)
Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies a default Hazelcast JavaSerializationFilterConfig to the instances it creates from its own configuration, a...
CVE-2024-54679
CVE-2024-54679 CVE-2024-54679 - CyberPanel aka Cyber Panel Denial of Service Description A denial of service DoS vulnerability was discovered in Cyber Panel that allows any authenticated user to restart the database by sending requests to the /dataBases/restartMySQL endpoint. This vulnerability...