115166 matches found
CVE-2026-85150: NULL Pointer Dereference
A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...
CVE-2026-85150: NULL Pointer Dereference
A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...
UltimateWDACBypassList — Updated!
Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...
jdvrif — Updated!
jdvrif jdvrif JPG Data Vehicle , v9.0 is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. Linux only. Your data file is compressed with libdeflate/zlib , then encrypted with XChaCha20-Poly1305 libsodium secretstream under a key deriv...
CVE-2026-84856
rowboatlabs rowboat versions up to 0.9.1 are affected by a denial of service vulnerability in the Composio Webhook Endpoint (apps/rowboat/app/api/composio/webhook/route.ts), specifically in the request.text/req.json function. The attack is remotely exploitable with no authentication required. A p...
Security update for texlive
This update for texlive fixes the following issue: CVE-2026-63729: heap use-after-free in the SyncTeX parser can lead to application crash or arbitrary code execution when malformed .synctex or .synctex.gz files are processedbsc1272432. Patch Instructions: To install this SUSE update use the SUSE...
Cross-site Scripting (XSS)
Overview org.apache.spark:spark-core2.12 is an unified analytics engine for large-scale data processing. It provides high-level APIs in Scala, Java, Python, and R, and an optimized engine that supports general computation graphs for data analysis. It also supports a rich set of higher-level tools...
GHSA-9437-39HJ-3C93 Apache Spark History Server allows stored cross-site scripting through unescaped application names
There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...
Apache Spark History Server allows stored cross-site scripting through unescaped application names
There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...
gha-lab-a5c1876997-1
Sobre KanaDojo | Capturas de pantalla | Filosofía de UI y Diseño | Tecnologías utilizadas | Primeros Pasos | Estructura de proyecto | Contribuir | Licencia | Agradecimientos | Contacto y Enlaces KanaDojo かな道場 Una plataforma estética, minimalista y altamente personalizable para dominar el japonés...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
bunkerweb v1.6.15-rc1
🌐 Website | 🤝 Panel | 📓 Documentation | 👨💻 Demo | 📱 Demo UI | 🧩 Templates | 🛡️ Examples 💬 Chat | 📝 Forum | 📝 Community | 🗺️ Threatmap | 📊 Status | 🔎 Feedback 🛡️ Make security by default great again! BunkerWeb Bun...
CVE-2019-9581
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:04+00:00| seen| https://t.me/hackingAttack/34969 2026-09-02 01:02:30+00:00| seen| https://t.me/hackingAttack/34969 2026-09-07 01:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/34969...
CVE-2019-20367
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:45+00:00| seen| https://t.me/hackingAttack/49652 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45703 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49652 2026-09-02 01:02:04+00:00| seen|...
Security Bulletin: Multiple vulnerabilities have been identified in IBM SDK, Java Technology Edition, an IBM Websphere (WAS) prerequisite. WAS is used by IBM Rational ClearQuest
Summary IBM® SDK, Java™ Technology Edition is a prerequisite in order to use IBM WebSphere Application ServerWAS. WAS is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM SDK, Java Technology Edition CSPU have been published in a security bulleti...
USN-8709-1 ncurses vulnerability
It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A local attacker could possibly use this issue to cause applications using ncurses to crash, resulting in a denial of service...
CVE-2026-18210
CVE-2026-18210 is a critical (CVSS 9.8) SQL injection vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company's Products's Store , caused by improper neutralization of special elements in SQL commands. The issue affects versions before commit 03...
pingap v0.13.10
Pingap A reverse proxy and application gateway built on Cloudflare Pingora. It is configured through TOML files or a web admin that is part of the binary, takes changes without a restart, and comes with more than thirty plugins. 中文说明 | Documentation · 中文文档 | Examples | Plugins | Crates | Upgradin...
Sandboxie v1.18.3
Sandboxie Plus / Classic EN | 中文 System requirements| Release notes| Contribution guidelines| Security policy| Code of Conduct ---|---|---|---|--- Windows 7 or higher 64-bit| CHANGELOG.md| CONTRIBUTING.md| SECURITY.md| CODEOFCONDUCT.md Sandboxie is a sandbox-based isolation software for Windows...
CVE-2026-84232: Improper Neutralization of Input During Web Page Generation
A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type e.g., text/html for .html files, image/svg+xml for .svg files and without a Content-Disposition: attachment header when using local filesystem...