7507 matches found
CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-
Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling rouille Assigned CVE ID: CVE-2026-66754 Summary Request::removeprefix tests the percent-decoded URL but asserts on the raw one. A request whose decoded path starts with the prefix while its raw path does no...
EUVD-2026-68293
A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smfnudmsdmhandleget of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely...
CVE-2026-82590
Open5GS versions up to 2.7.7 are affected by a vulnerability in the SMF (Session Management Function) component, specifically in the function smf_nudm_sdm_handle_get within src/smf/nudm-handler.c. A remote attacker can manipulate the preemptCap argument to trigger a reachable assertion , resultin...
CVE-2016-2569
Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...
EUVD-2026-68133
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mosamlloginvalidate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse into the mosamlrequiredcertificate...
CVE-2026-75807
The SAML Single Sign On – SSO Login plugin for WordPress (versions up to 5.4.6 ) is vulnerable to an unauthenticated authentication bypass caused by X.509 certificate poisoning. The mo_saml_login_validate() ACS handler persists the X.509 certificate from an incoming SAMLResponse into the mo_saml_...
vaas-cve-2015-5477
Vulnerability as a Service - CVE 2015-5477 Un sistema Linux Debian Wheezy con una versione vulnerabile di bind9 per mostrare CVS-2015-5477. Panoramica Questo container docker è basato su Debian Wheezy ed è stato modificato per utilizzare una versione vulnerabile di bind9 e le corrispondenti...
CVE-2026-60206
CVE-2026-60206 – PoC per il bypass dell'autenticazione SAML in Oracle WebLogic Server Questo repository fornisce un exploit proof-of-concept per CVE-2026-60206 , una vulnerabilità critica di bypass dell'autenticazione nell'implementazione SAML di Oracle WebLogic Server. La falla consente a un...
CVE-2026-80606
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...
CVE-2026-80640 cxl/fwctl: Fix __fortify_panic
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...
CVE-2026-80633 iommufd: Take dma_resv lock before dma_buf_unpin() in release path
In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dmaresv lock before dmabufunpin in release path dmabufunpin requires the caller to hold the exporter's dmaresv lock: void dmabufunpinstruct dmabufattachment attach ... dmaresvasserthelddmabuf-resv;...
EUVD-2026-67482
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...
CVE-2026-80606
This Linux kernel vulnerability affects the DRM/xe userptr subsystem. When built with CONFIG_DRM_XE_USERPTR_INVAL_INJECT=y (a test/debug option), xe_pt_svm_userptr_pre_commit() acquires the SVM notifier_lock for read, but the injection path eventually calls drm_gpusvm_unmap_pages() which asserts ...
CVE-2026-80606 drm/xe/userptr: Hold notifier_lock for write on inject test path
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...
vcenter_saml_login
Strumento di Accesso SAML per vCenter Uno strumento per estrarre il certificato dell'Identity Provider IdP dai backup di vCenter e accedere come Administrator Contesto Comunemente, durante gli engagement, otteniamo accesso ai backup di vCenter su un file server o accesso root all'host VCSA tramit...
cve-2015-5477
PoC per il DoS da assert TKEY di BOND9 CVE-2015-5477 Questo exploit verifica se un server BIND9 è vulnerabile inviando l'exploit per vedere se va in crash. È codice C che si compila nel modo normale su Unix/Window, ad esempio: root@kitploit: gcc tkill.c -o tkill Funzionerà sia su IPv4 che su IPv6...
CVE-2026-30046
A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
CVE-2026-30047
A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
EUVD-2026-67104
A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...