Lucene search
+L

376 matches found

Kitploit
Kitploit
•added 2026/11/13 12:59 a.m.•37 views

wxpath

wxpath - declarative web graph traversal with XPath NEW: TUI - Interactive terminal interface powered by Textual for testing wxpath expressions and exporting data. Install Requires Python 3.10+. pip install wxpath For TUI support: pip install "wxpathtui" Immediately launch the TUI via uv: uvx...

6.3AI score
SaveExploits0References6
osv_debian
osv_debian
•added 2026/11/11 3:17 p.m.•11 views

DEBIAN-CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

8.3AI score0.00408EPSS
SaveExploits9References1
CVE
CVE
•added 2026/11/11 2:54 p.m.•232 views

CVE-2026-119618

The Apache HTTP Server is affected by a critical vulnerability in the mod_http2 module within the assign_headers() function. The issue is caused by Concurrent Execution using Shared Resource with Improper Synchronization (CWE-362), which can lead to heap corruption and Remote Code Execution (RCE)...

8.3AI score0.00408EPSS
SaveExploits9References8
AlpineLinux
AlpineLinux
•added 2026/11/11 2:54 p.m.•9 views

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

8.3AI score0.00408EPSS
SaveExploits9
Cvelist
Cvelist
•added 2026/11/11 2:54 p.m.•55 views

CVE-2026-119618 Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

0.00408EPSS
SaveExploits9References1
Tenable Nessus
Tenable Nessus
•added 2026/11/11 12:00 a.m.•4 views

Rocky Linux 9.6 [TuxCare] Security Update: mod_http2 (ALMALINUX9.6:CLSA-2026:1794423962)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794423962 advisory. - Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders...

8.3AI score0.00408EPSS
SaveExploits9References3
Tenable Nessus
Tenable Nessus
•added 2026/11/11 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2026-119618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This...

8.4AI score0.00408EPSS
SaveExploits9References2
BDU FSTEC
BDU FSTEC
•added 2026/11/02 12:00 a.m.•9 views

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to concurrent execution using shared resources with improper synchronization. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

4.1CVSS6.4AI score0.00215EPSS
SaveExploits0References19Affected Software4
osv_cleanstart
osv_cleanstart
•added 2026/10/27 12:38 a.m.•19 views

CLEANSTART-2026-UL53365 Concurrent execution using shared resource with improper synchronization ('race condition') in ASP

Security vulnerability affects the azure-functions-host package. Concurrent execution using shared resource with improper synchronization 'race condition' in ASP...

7.5CVSS7.8AI score0.00531EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/26 5:28 p.m.•21 views

CVE-2026-111404

The VillaTheme Photo Reviews for WooCommerce plugin (wo-photo-reviews) is vulnerable to a Race Condition (CWE-362) due to concurrent execution using a shared resource with improper synchronization. This issue affects versions from n/a through 1.2.31 . Exploitation details are not provided in the ...

3.7CVSS5.9AI score0.00202EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/26 4:37 p.m.•15 views

CVE-2026-116403 WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Downloads: from n/a through 3.7.1...

5.9CVSS5.9AI score0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•17 views

CVE-2026-111449: Concurrent Execution using Shared Resource with Improper Synchronization

Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true disabled by default. An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that...

5.9CVSS5.9AI score0.0021EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•14 views

CVE-2026-101311: Concurrent Execution using Shared Resource with Improper Synchronization

The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync. Additionally, writes to the framebuffer BAR could set arbitrary width and height values without validation, and the framebuffer BAR I/O and RFB rendering...

7CVSS6.6AI score0.00117EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•26 views

CVE-2026-104970: Concurrent Execution using Shared Resource with Improper Synchronization

Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-229 uses InstanceAdmin.objects.first for the first-admin check and performs account creation without an atomic transaction, row lock,...

8.1CVSS5.9AI score0.00265EPSS
SaveExploits0References2
Veracode
Veracode
•added 2026/09/19 5:31 a.m.•26 views

Concurrent Execution Using Shared Resource With Improper Synchronization

Paymenter is vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization. The vulnerability is due to missing transactional locking when processing concurrent service downgrade requests, which allows an authenticated attacker to submit multiple simultaneous requests and...

6.5CVSS5.9AI score0.00325EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•15 views

CVE-2026-71537: Concurrent Execution using Shared Resource with Improper Synchronization

Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade relies on Service::upgradable to check for a pending service upgrade and later executes $credit-increment'amount', abs$price without DB::transactio...

6.5CVSS6AI score0.00325EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/09 12:57 p.m.•49 views

CVE-2026-79962

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...

5.3CVSS0.00311EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:20 p.m.•15 views

CVE-2026-70582

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

6.4CVSS0.00211EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:20 p.m.•18 views

CVE-2026-70091

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...

5.9CVSS0.00655EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:19 p.m.•22 views

CVE-2026-69710

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

7.5CVSS0.00211EPSS
SaveExploits0References1
Rows per page
Query Builder