Netgear R6850 V1.1.0.88 - Command Injection

Netgear R6850 router firmware version V1.1.0.88 suffers from a command injection vulnerability in the pingtest functionality. An unauthenticated attacker can inject arbitrary system commands through the c4IPAddr parameter, resulting in remote code execution as root. id: CVE-2024-30568 info: name:...

osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...

Yaws 1.91 - Local File Inclusion

Yaws 1.91 allows unauthenticated local file inclusion via /%5C../ submitted to port 8080. id: CVE-2017-10974 info: name: Yaws 1.91 - Local File Inclusion author: 0xAkoko severity: high description: Yaws 1.91 allows unauthenticated local file inclusion via /%5C../ submitted to port 8080. impact: |...

Node.js st module Directory Traversal

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. id: CVE-2014-3744 info: name: Node.js st module Directory Traversal author: geeknik severity: high description: A...

Apache OFBiz - Directory Traversal & Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue. id: CVE-2024-36104 info: name: Apache OFBiz - Directory...

WordPress RevSlider - Remote Code Execution via File Upload

The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an updateplugin...

chrome_v8_ndays

...

CVE-2026-71211-exploit

CVE-2026-71211-exploit استغلال CVE-2026-71211...

writeup-CVE-2024-3094

writeup-CVE-2024-3094...

openclarity

OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...

openclarity

OpenClarity هي أداة مفتوحة المصدر للكشف الآلي بدون وكيل وإدارة قائمة مكونات البرامج SBOM للأجهزة الافتراضية والتهديدات الأمنية مثل الثغرات الأمنية، والاستغلالات، والبرامج الضارة، والروت كيت، والتكوينات الخاطئة، والأسرار المسربة. انضم إلى قناة Slack الخاصة بـ OpenClarity للاطلاع على أحدث الإعلانات...

CVE-2026-72805

creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:19+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-67x2-mq63-v9vm 2026-09-04 05:31:58+00:00| seen| https://gist.github.com/alon710/4b6d07ad637cc3c13ae34977d7426539...

CVE-2025-67146-CVE-2025-67147

CVE-2025-67146-CVE-2025-67147...

CVE-2017-11882

CVE-2017-11882 CVE-2017-11882 का एम्पायर पोर्ट कोड को दूसरे मूल रिपॉजिटरी में स्थानांतरित कर दिया गया है। पुनर्निर्देशित करें?...

CVE-2026-85049

creationtimestamp| type| source ---|---|--- 2026-09-04 00:03:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117209839276217417 2026-09-04 04:46:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...

ansible-role-cve

Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. root@kitploit: cve20165195: false Example Playbook root@kitploit: --- ...

The vulnerability of the vsp1destroy_entities() function in the drivers/media/platform/renesas/vsp1/vsp1_drv.c file of the multimedia device driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the vsp1destroyentities function in the drivers/media/platform/renesas/vsp1/vsp1drv.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-75160

An issue in X-Serie Gateway Firmware V60005 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi...

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...

Linux Distros Unpatched Vulnerability : CVE-2026-80747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the...