EUVD-2026-42899

PraisonAI: Shell command allowlist bypass via find -exec built-in action...

USN-8908-1 bluez vulnerabilities

Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the A2DP profile. An attacker could possibly use this issue to cause a stack buffer overflow, resulting in a denial of service or arbitrary code execution. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22....

CVE-2026-21857

CVE-2026-21857 : Redaxo a une traversée de chemin dans l'addon Backup menant à une lecture arbitraire de fichiers Aperçu Champ| Détails ---|--- Identifiant CVE| CVE-2026-21857 Sévérité| HAUTE Avis| Voir l'avis Découvert par| Lukasz Rybak Produits affectés redaxo/source versions : = 5.20.1...

CVE-2026-12091

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read...

DEBIAN-CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

CVE-2026-12091 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read...

EUVD-2026-95267

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read...

CVE-2026-12091

IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 are vulnerable to a denial of service (DoS) condition. The root cause is a heap-based out-of-bounds read triggered when a remote attacker sends a specially crafted request, result...

CVE-2021-29447

CVE-2021-29447 - استغلال ثغرة XXE في ووردبريس الوصف يحتوي هذا المستودع على استغلال لـ CVE-2021-29447، وهي ثغرة XXE XML External Entity موجودة في WordPress 5.7.0 والإصدارات الأقدم. توجد الثغرة في مكتبة الوسائط التي تعالج ملفات WAV، مما يسمح للمهاجم بقراءة ملفات عشوائية من الخادم. المتطلبات باش...

CVE_2021-41773

Vulnerability scanner for Apache Path Traversal CVEs 2021-41773...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP ثغرة القراءة التعسفية في النواة + استغلال Superfetch EOP استنادًا إلى بحث من https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . يجب تشغيل الاستغلال من مستوى تكامل منخفض...

tomcatfileread

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Exploitation POC de lecture de fichier / inclusion de fichier via le protocole AJP de Tomcat — version convertie en python3. Auteur de la version originale python2 : ydhcui —...

Apache-Solr-Arbitrary-File-Read

قراءة ملف تعسفية في Apache Solr Hit Counter Apache Solr اختصارًا لـ Searching On Lucene with Replication هو محرك بحث مجاني ومفتوح المصدر يعتمد على مكتبة Apache Lucene، ومكتوب بلغة Java. يوفر Apache Solr واجهات برمجة تطبيقات RESTful بصيغتي XML/HTTP وJSON، بالإضافة إلى مكتبات عملاء للعديد من لغات...

CVE-2021-44142

Vérificateur de vulnérabilité CVE-2021-44142 Un outil pour vérifier si un serveur Samba est vulnérable à CVE-2021-44142 Contexte CVE-2021-44142 est une lecture et une écriture hors limites du tas dans le module vfsfruit de Samba, utilisée lors du Pwn2Own Austin 2021 contre le Western Digital...

CVE-2026-82334

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...

CVE-2026-106435 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

EUVD-2026-95254

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

CVE-2026-106435

The MongoDB Python Driver contains an out-of-bounds read vulnerability in its binary accelerator. This occurs when an application decodes malformed BSON containing a truncated regular-expression element missing a trailing NUL byte. An attacker who can supply BSON to the decode or decode_all APIs ...

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...