373739 matches found
CVE-2026-57941
A flaw was found in the modhttp2 module of Apache HTTP Server. A remote, unauthenticated attacker could exploit a use-after-free condition—where memory is accessed after being released—through re-entrant processing of shared session buffers. This flaw can allow an attacker to potentially execute...
CVE-2026-106155
Progress Telerik Report Server prior to version 12.2.26.1007 is vulnerable to a stored cross-site scripting (XSS) flaw in the shared reporting engine. An authenticated report author can embed javascript: or vbscript: URLs within report navigation actions or HTML text box links. If another user vi...
EUVD-2026-95524
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...
CVE-2026-106155 Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...
EUVD-2026-95523
In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...
CVE-2026-106145 Privilege Escalation in Telerik Report Server Service-Agent Hub
In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...
CVE-2026-106145
Progress Telerik Report Server prior to version 12.2.26.1007 is vulnerable to a privilege escalation flaw due to incorrect privilege assignment in the service-agent SignalR hub . An authenticated user, such as a low-privilege or guest account with a valid bearer token, can register as a trusted s...
POC-CVE-2026-56164-exploit
CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...
Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues
Summary Multiple vulnerabilities affect IBM Sterling External Authentication Server and are addressed in SEAS 6115 fixpack Vulnerability Details CVEID:CVE-2026-77310 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
nginxpwner
Nginxpwner Nginxpwner es una herramienta simple para buscar configuraciones incorrectas y vulnerabilidades comunes de Nginx. Instalación: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Instalar usando Docker git clone...
columbus-server
Servidor Columbus ¡Este repositorio está obsoleto! ‼️ El componente del servidor se ha movido a https://github.com/elmasy-com/columbus. Columbus Project es un servicio de descubrimiento de subdominios basado en API, un servicio de enumeración de subdominios extremadamente rápido con funciones...
[SECURITY] Fedora 44 Update: xorg-x11-server-Xwayland-24.1.14-1.fc44
Xwayland is an X server for running X clients under Wayland...
CLEANSTART-2026-MQ00302 specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-RR06957 When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2...
CLEANSTART-2026-IK18722 specially crafted request could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted request could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-XO55123 maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A maliciously constructed HTTP/2 request could cause modhttp2 in Apache HTTP Server 2...
CLEANSTART-2026-OV84065 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-HI95009 vulnerability was found in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A vulnerability was found in Apache HTTP Server 2...