CVE-2022-2602

CVE-2022-2602 This repository contains exploits for CVE-2022-2602. There are two versions of it: Exploit using userfaultfd technique. Exploit using inode locking technique. Enjoy! : LukeGix...

CVE-2022-2602-Study

This repository does not have a README...

Rocky Linux 9.2 [CIQ] Security Update: libcap / libcap-devel Multiple Vulnerabilities (ciqsa-2026_1627)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261627 advisory. This advisory aggregates security fixes for the libcap SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2023-2602, CVE-2023-2603. Tenable has extracted the...

Photon OS 5.0: Libcap PHSA-2023-5.0-91-0020

An update of the libcap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0020. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-2602

creationtimestamp| type| source ---|---|--- 2026-03-30 01:09:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116315453803152963 2026-03-31 21:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mif66ct5rl2j...

CVE-2026-2602

The CVE-2026-2602 entry concerns the Twentig WordPress plugin. A stored XSS flaw exists in the featuredImageSizeWidth parameter for versions up to 1.9.7 due to insufficient input sanitization and output escaping. Authenticated users with Contributor-level access or higher can inject arbitrary scr...

CVE-2026-23862

CVE-2026-23862 affects Dell ThinOS 10 versions prior to ThinOS 2602_10.0573. The vulnerability is an Improper Neutralization of Special Elements in a Command (command injection) that could be exploited by a low-privileged local attacker to achieve Elevation of Privileges. The impact is high for c...

MiracleLinux 9 : libcap-2.48-9.el9 (AXSA:2023-6399:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6399:02 advisory. libcap: Integer Overflow in libcapstrdup CVE-2023-2603 libcap: Memory Leak on pthreadcreate Error CVE-2023-2602 Tenable has extracted the preceding...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.212.b04-0.el7 (AXSA:2019-3844:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3844:03 advisory. Enhancement - Oracle Java SE REIWA Security Fix - CVE-2019-2698, CVE-2019-2602, CVE-2019-2684 CVE CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted t...

MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.221-2.6.18.0.0.1.el7.AXS7 (AXSA:2019-3860:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3860:03 advisory. Enhancement - Oracle Java SE REIWA Security Fix - Oracle Java SE Libraries DoSCVE-2019-2602 - Oracle Java SE RMI CVE-2019-2684 - Oracle Java SE 2D...

MiracleLinux 7 : java-11-openjdk-11.0.3.7-0.el7 (AXSA:2019-3894:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3894:02 advisory. OpenJDK: Slow conversion of BigDecimal to long Libraries, 8211936 CVE-2019-2602 OpenJDK: Incorrect skeleton selection in RMI registry server-side...

MiracleLinux 4 : java-1.8.0-openjdk-1.8.0.212.b04-0.AXS4 (AXSA:2019-3838:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3838:02 advisory. Enhancement - Oracle Java SE REIWA Security Fix - CVE-2019-2602, CVE-2019-2684, CVE-2019-2698 CVE CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted t...

CVE-2024-2602

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor...

FiberHome AN5506-04-F and FiberHome HG6245D have security vulnerabilities

FiberHome AN5506-04-F and FiberHome HG6245D are both routers from FiberHome, a Chinese company. A security vulnerability exists in the FiberHome AN5506-04-F and FiberHome HG6245D that stems from a stack buffer overflow issue in the HTTP service, which could lead to a crash or perform flow control...

Linux Distros Unpatched Vulnerability : CVE-2022-2602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring UAF, Unix SCM garbage collection CVE-2022-2602 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

TencentOS Server 3: libcap (TSSA-2023:0173)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0173 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: libcap (TSSA-2024:0121)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0121 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2025-2602

creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8426 2025-03-21 22:39:53+00:00| seen| https://t.me/cvedetector/20838 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2602

CVE-2025-2602 concerns SourceCodester Kortex Lite Advocate Office Management System v1.0. The affected component is the deactivate_reg.php file where manipulation of the ID parameter enables SQL injection. A remote attacker can exploit this without user interaction, and public disclosure has occu...

CVE-2025-2602 SourceCodester Kortex Lite Advocate Office Management System deactivate_reg.php sql injection

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file deactivatereg.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T...