8065 matches found
CVE-2026-79981
The Zephyr RTOS DNS stub resolver (specifically in subsys/net/lib/dns/resolve.c) contains a vulnerability where it binds a single UDP socket per configured server during initialization. Because the source port remains constant for the lifetime of the resolver context while only the 16-bit transac...
CVE-2026-79980
The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c contains a vulnerability where the transaction identifier (xid) is maintained as a predictable counter rather than a per-transaction random value. Because this identifier is the only unpredictable reply-validation token, an attacker observing a ...
CVE-2026-46531
Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...
CVE-2026-46531 Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)
Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...
EUVD-2026-109087
Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...
CVE-2026-46531
Cacti, an open source performance and fault management framework, is vulnerable to an authenticated stored second-order SQL injection in the automation tree rule item handler. Affecting versions 1.2.27 to before 1.2.31 , the flaw allows a user with the Automation realm (default General Administra...
wch-ch56x-lib
wch-ch56x-lib This library was built alongside Hydradancer, a new backend for the Facedancer USB emulation library based on the WCH569 chip. Reliable drivers were needed for this project and many features were missing from the WCH examples or untested. This library provides USB3, USB2, HSPI and...
dhcpoptinj
DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...
cve-2020-1015
CVE-2020-1015 PoC for CVE-2020-1015 More detail available here To compile: 1. Create an empty C++ project in Visual Studio. 2. Add cve20201015.cpp and Source.idl to the project as source files. 3. Compile Source.idl. This will generate three files: Sourcec.c, Sourceh.h and Sources.c. 4. Add the...
CVE-2026-90781-alsa-lib-oob
CVE-2026-90781 — alsa-lib OOB Write Reproducer Standalone C reproducer for CVE-2026-90781 , a 1-byte out-of-bounds write in alsa-lib's sndctlasciielemidparse when parsing name= both quoted and unquoted forms. Vulnerability In src/control/ctlparse.c v1.2.16.1 and earlier development HEAD: char...
Malware in @ecg-internal/media-util-js-lib
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
PT-2026-122141
Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...
DEBIAN-CVE-2026-115505
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actualcount or...
EUVD-2026-108337
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actualcount or...
CVE-2026-115513
OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in...
CVE-2026-115513
The software OpenCATS before version 0.12.0 is vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is the unsanitized storage and subsequent unescaped rendering of fields such as Candidate, Company, Contact, Job Order, or List name/title. The malicious payload is executed via t...
EUVD-2026-108259
OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in...
CVE-2026-115513 OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel
OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in...