14046 matches found
Exploit for Heap-based Buffer Overflow in Gnu Glibc
CVE-2023-4911 This is a PoC Proof Of Concept for the Looney...
Moderate: Red Hat Security Advisory: ACS 4.7 enhancement and security update
Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes new features and security and bug fixes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...
PT-2025-11483
Name of the Vulnerable Software and Affected Versions Expr versions prior to 1.17.0 Description The issue arises when the Expr expression parser is given an unbounded input string, causing it to attempt to compile the entire string and generate an Abstract Syntax Tree AST node for each part of th...
Linux 5.6 Cred Refcount Overflow
Linux 5.6 suffers from a cred refcount overflow at approximately 39 gigs of memory usage via iouring. see also my related prior bug reports about overflowing refcounts with lots of RAM usage: https://crbug.com/project-zero/809: BPF program refcount, with 32GiB RAM...
sctp: sysctl: rto_min/max: avoid using current->nsproxy
...
Waitress has a denial of service leading to high CPU usage/resource exhaustion
...
SUSE CVE-2025-27421
Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events SSE implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources...
CVE-2024-8176
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...
Exploit for Path Traversal in Pluginus Husky_-_Products_Filter_Professional_For_Woocommerce
CVE-2025-1661 Exploit for CVE-2025-1661 - HUSKY – Products Fil...
net: stmmac: fix TSO DMA API usage causing oops
...
Exploit for Missing Authorization in Xlplugins Finale
CVE-2024-30485 Exploit 📌 Overview CVE-2024-30485 is a...
CVE-2025-21849
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spinlockirqsave in interruptible context spinlock/unlock functions used in interrupt contexts could result in a deadlock, as seen in GitLab issue 13399, which occurs when interrupt comes in while holding a lock...
HPE Insight Remote Support Detection
Binary data hpeinsightremotesupportdetect.nbin...
UniRide Vehicle Booking Management System 1.0 Shell Upload
UniRide Vehicle Booking Management System version 1.0 suffers from a remote shell upload vulnerability. ============================================================================================================================================= | Title : UniRide Vehicle Booking Management System...
Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...
Denial Of Service (DoS)
OpenTelemetry.Api is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of tracestate and traceparent headers, allowing an attacker to trigger high CPU usage and degrade application performance...
RealVNC Connect Server Installed (macOS)
Binary data realvncconnectservermacinstalled.nbin...
PocketMine-MP allows malicious client data to waste server resources due to lack of limits for explode()
Impact Due to lack of limits by default in the explode function, malicious clients were able to abuse some packets to waste server CPU and memory. This is similar to a previous security issue published in https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-gj94-v4p9-w672, but with a...
`tree-sitter-pkl` was removed from crates.io for malicious code
tree-sitter-pkl was part of a campaign that attempted to exfiltrate environmental data from the host. The malicious crate had 1 version published in March 2025, and had no evidence of actual usage. This crate had no dependencies on crates.io...