16894 matches found
CVE-2026-76282
Splunk Enterprise versions 10.4.3 , 10.2.7 , 10.0.10 , and 9.4.15 are affected by CVE-2026-76282 , which involves Improper Control of a Resource Through its Lifetime (CWE-664). Splunk addressed these internally identified vulnerabilities by grouping them by CWE and assigning specific identifiers ...
CVE-2026-76282 Improper Control of a Resource Through its Lifetime in Splunk Enterprise
Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...
CVE-2026-76500
The Cisco Application Policy Infrastructure Controller (APIC) is affected by vulnerabilities involving improper control of a resource through its lifetime (CWE-664). These issues were identified during an internal security review and are addressed in the October 2026 hardening release . The impac...
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
In August, the Malwarebytes research team reported on a new malicious turnkey kit that makes it possible for almost anyone to launch a sophisticated online scam. The kit was not simply a fake website. It bundled the command center, victim tracking, and administrative tools into a ready-to-use...
Wireshark 1.4.x < 1.4.12 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.12 advisory. - The ANSI A dissector could dereference a NULL pointer and crash. It may be possible to make Wireshark...
Security Updates for Microsoft Exchange Server (October 2026 OOB)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability: - Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. CVE-2026-96940...
CVE-2026-98258
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...
VulnCheck KEV: CVE-2026-51886
langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code remote. The component is: src/backend/base/langflow/api/v1/validate.py:validate-postvalidatecode-a-real-authenticated-http-post-to-api-v1. The attack vector is: Attack surface: HTTP or browser-backed...
EUVD-2026-91120
Langflow: Title Authenticated Remote Code Execution in validatecode via Malicious Decorators Description...
ubl-itel-s23
Разблокировка загрузчика — Itel S23 S665L / Unisoc T606 Руководство по разблокировке загрузчика на Itel S23 S665L с использованием эксплойта CVE-2022-38694 на чипсете Unisoc T606 UMS9230. Информация об устройстве Свойство| Значение ---|--- Бренд| Itel Модель| S665L S23 Android| 12 SDK 31 Сборка|...
CVE-2002-0991
CVE-2002-0991 Переполнения буфера в команде cifslogin для HP CIFS/9000 Client A.01.06 и более ранних версий Публикация Exploit-db: https://www.exploit-db.com/exploits/21577/ Публикация на Packetstorm: https://packetstormsecurity.com/files/26303/cifslogin.txt.html Публикация на SecurityFocus:...
Astra Linux – Vulnerability in connman
ConnMan also known as Connection Manager versions 1.30 to 1.39 have a stack-based buffer overflow issue in the uncompress function of dnsproxy.c, occurring due to the use of NAME, RDATA, or RDLENGTH fields for the A or AAAA records...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: NFC: Digital: Bounds check for NFC-A cascade depth in the SDD response handler The NFC-A anti-collision cascade in digitalinrecvsddres appends 3 or 4 bytes to target-nfcid1 at each round. However, the number of cascade rounds is...
CVE-2025-25163
CVE-2025-25163 Плагин A/B Image Optimizer = 3.3 - Аутентифицированное Subscriber+ произвольное скачивание файлов Описание Плагин A/B Image Optimizer для WordPress подвержен уязвимости Directory Traversal во всех версиях до 3.3 включительно. Это позволяет аутентифицированным злоумышленникам с...
Malicious code in css-gap-decorations-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8126656cc344a4f632b8ddf5a23683fc92ac22798bb67e1aed6bca73ac82d7b6 The package is published as a CSS polyfill but ships no polyfill functionality. On require, thunderboltRegistry.js uses childprocess.execSync to run...
ubl-itel-s23
Разблокировка загрузчика — Itel S23 S665L / Unisoc T606 Руководство по разблокировке загрузчика на Itel S23 S665L с использованием эксплойта CVE-2022-38694 на чипсете Unisoc T606 UMS9230. Информация об устройстве Свойство| Значение ---|--- Бренд| Itel Модель| S665L S23 Android| 12 SDK 31 Сборка|...
CVE-2020-14295
CVE-2020-14295 취약점 세부 정보 - https://github.com/Cacti/cacti/issues/3622 설치 pip3 install -r requirements.txt 사용법 $ ./gimme-a-shell.py --help usage: gimme-a-shell.py -h -t Target -U Username -P Password -i Shell-IP -p Shell-Port optional arguments: -h, --help show this help message and exit required...
dns-zone-transfer-test
Тест передачи зоны DNS Автоматизирует проверку передачи зон системы доменных имен DNS. Автоматически находит серверы имен указанных доменов и проверяет возможность передачи зон; в случае успеха найденные A-записи выводятся в стандартный вывод. Использование dztt zonetransfer.me dztt -f domains.tx...
CVE-2026-96940
A weak authorization vulnerability in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. The vulnerability is confirmed and is addressed in several security updates, including KB5129955 (Subscription Edition RTM), KB5129956 (2019 CU15), KB5129957 (201...