2830 matches found
Citrix SD-WAN Center - Remote Command Injection
Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...
Citrix SD-WAN Center - Remote Command Injection
Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...
CVE-2026-81469
Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...
CVE-2022-0997
Fidelis Network и Deception — CVE-2022-0997 — Повышение привилегий через небезопасные права доступа к файлам Публикация и благодарности Эксплоит был одобрен для публичного распространения правительством США. Особая благодарность военнослужащим и правительственным связным, ответственным за...
CVE-2026-81469
Dell Inventory Collector Client versions prior to 15.0.0 are affected by an Unquoted Search Path or Element vulnerability. A low-privileged attacker with local access can exploit this to achieve code execution and elevation of privileges , rated CVSS 7.8 (HIGH) with full impact to confidentiality...
CVE-2021-26088
PoC для CVE-2021-26088, написанный на PowerShell Описание Уязвимость некорректной аутентификации в FSSO Collector может позволить неаутентифицированному пользователю обойти любое правило аутентификации межсетевого экрана и получить доступ к защищённой сети путём отправки специально сформированных...
Dop2Mop
Dop2Mop Прототип сборщика OpenGraph для BloodHound, отображающего пути атак от DevOps до инфраструктуры MLOps. Основано на Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure авторства Brett Hawkins @h4wkst3r. Содержание Благодарности Обзор Поддерживаемые платформы...
Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.11.1 release
Red Hat build of OpenTelemetry 3.11.1 has been released This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: None Deprecations: None Technology Preview features: None Enhancements: None Bug fixes: Before this update, the...
vuln-list-backup
vuln-list Автоматически собирает информацию об уязвимостях и сохраняет её в формате, пригодном для парсинга Источники Каталог| ОС| Источник| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb|...
CLEANSTART-2026-KV65948 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-JY06223 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-DE21669 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-AD74285 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-QD76067 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-KU86839 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-BW44579 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-TU13335 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-LD19484 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CVE-2026-84083
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmapwrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands...
CVE-2025-49844
🚨 CVE-2025-49844 — "RediShell" Критическое удаленное выполнение кода в самом быстром in-memory хранилище в мире Lua-скриптинг Redis только что стал идеальной зоной приземления после аутентификации. Аутентифицированный злоумышленник → созданный Lua-скрипт → выход из песочницы → полное RCE на хосте...