192286 matches found
CVE-2026-79766
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
UBUNTU-CVE-2026-97430
In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCDFLAGHWACCESSIBLE. HCDFLAGHWACCESSIBLE is set and cleared in suspend and resume...
kernel: nvme-tcp: fix host memory disclosure on R2T for a read command
A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...
Exploit for Improper Input Validation in Unrealircd
CVE-2010-2075 — UnrealIRCd 3.2.8.1 Backdoor Exploit !Python...
Exploit for Code Injection in Apache Ofbiz
ofbiz-xmlrpc-rce CVE-2023-49070 PoC for the Apache OFBiz XM...
CLSA-2026-1790267010 rsync: Fix of 7 CVEs
CVE-2026-53783: rrsync restricted-directory escape through a symlinked or raced path component, --copy-unsafe-links, -D or a symlinked log file; partial, the dir-merge rule escape needs --confine-root 3.5.0 - CVE-2026-53790: the daemon's pre-xfer/post-xfer exec hooks and RSYNCCONNECTPROG expanded...
DEBIAN-CVE-2026-96745
Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...
CVE-2026-96745
Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...
CVE-2026-93425
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the patch.readRepoDirectories tRPC procedure passes the user-controlled repoPath value from apps/dokploy/server/api/routers/patch.ts into a shell command in packages/server/src/services/patch-repo.ts without safe...
CVE-2026-79761
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...
UBUNTU-CVE-2026-96745
Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...
CVE-2026-23744
CVE-2026-23744 — MCP Connect RCE via Unauthenticated Command Injection ⚠️ Disclaimer: This repository is for educational and security research purposes only. Using this exploit against systems without explicit authorization is illegal. The author is not responsible for any misuse of this code. 📌...
CVE-2026-97430 xhci: Prevent queuing new commands if xhci is inaccessible
In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCDFLAGHWACCESSIBLE. HCDFLAGHWACCESSIBLE is set and cleared in suspend and resume...
EUVD-2026-86043
In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCDFLAGHWACCESSIBLE. HCDFLAGHWACCESSIBLE is set and cleared in suspend and resume...
CVE-2026-97430 xhci: Prevent queuing new commands if xhci is inaccessible
In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCDFLAGHWACCESSIBLE. HCDFLAGHWACCESSIBLE is set and cleared in suspend and resume...
CVE-2026-97430
The Linux kernel contains a vulnerability where commands could be queued on the command ring even if the xhci controller was marked as inaccessible. The fix ensures the kernel refuses to queue new commands if the HCD_FLAG_HW_ACCESSIBLE flag is not set. Additionally, the kernel now prints a warnin...
CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
CVE-2026-79766
The web-based server management platform Termix (versions 2.4.1 through 2.5.0) contains an OS command injection vulnerability in its ACME/Let's Encrypt certificate-request handler. An authenticated administrator can supply attacker-controlled domain and email values via PATCH /users/acme-ssl-sett...
EUVD-2026-86161
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...