454351 matches found
XWiki < 4.10.20 - Remote code execution
XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...
CVE-2026-51585
realtek poc rt26cx21x64.sys exploit Realtek PCIe GbE/2.5GbE/5GbE family Overview OID 0xFF816871 maps the nic's mmio bar into the calling proc's virtual addr space, MmLockedPagesSpecifyCache, reachable from um via \.\RealTekCardGUID This IOCTL 0x0012C818 is gated by a registry value DrvMode=4 Once...
WBCE-CMS-Stored-XSS---Pages-Menu
WBCE CMS Stored XSS v1.6.1 Author: Sergio Description: WBCE CMS 1.6.1 is affected by a Cross-Site stored scripting XSS vulnerability that allows attackers to execute arbitrary code via a payload crafted in the Intro Page parameter in the Pages menu. The payload will be executed on the main page...
TotalCMS-Arbitrary_File-Upload--XSS_Steal_Cookies---TotalDepot
TotalCMS Arbitrary File Upload - XSS and steal cookies Author: Sergio Description: TotalCMS is affected by Arbitrary File Upload - XSS vulnerability which allows Cross-Site Scriting XSS and also stealing session cookies Attack Vectors: A vulnerability in "Total Depot" file upload sanitation allow...
CVE-2023-41080
vulnerable: http://localhost:8081//secret.html;@example.com Redirect to arbitrary web site in this case, https://example.com. patched: http://localhost:8082//secret.html;@example.com ref: https://github.com/advisories/GHSA-q3mw-pvr8-9ggc...
VmWare-vCenter-vulnerability
VMware Vulnerabilites VMware vCenter unauthorized arbitrary file read PoC working to Earlier versions 7.0.2.00100 Shodan Query for Private members only PoC CVE-2021-21972 PoC | VMware Unauthorized RCE CVE-2021-21972 PoC vmware ssrf poc | cve-2021-21975 poc cve-2021-21975 poc cve-2021-22005 poc |...
CVE-2024-46987
CVE-2024-46987 – Camaleon CMS Authenticated Path Traversal / Arbitrary File Read CVE-2024-46987 is an authenticated path traversal vulnerability CWE-22 in Camaleon CMS a Ruby on Rails-based content management system. It allows a logged-in user even with low privileges to read arbitrary files on t...
cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...
CLEANSTART-2026-UQ05512 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the apache-superset package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-QQ47371 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the apache-superset package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-BH69902 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the syft package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
EUVD-2026-95346
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
EUVD-2026-95323
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
EUVD-2026-95401
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
EUVD-2026-95330
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...
EUVD-2026-95326
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
EUVD-2026-95329
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
EUVD-2026-95339
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...