12104 matches found
CVE-2026-109564: Missing Authorization
LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/uuid/duplicate that skips the read-access and draft checks enforced by getplayground. Authenticated users with playground creation rights, such as Instructors, who know a RESTRICTED or unpublished...
macOS Buffer Overflow DoS
The vulnerability of macOS operating systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20261012-73-0225
The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
TencentOS Server 3: postgresql:16 (TSSA-2026:1111)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1111 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
SAMDump
SAMDump Extrae archivos SAM y SYSTEM de Windows usando el Servicio de Copia de Sombra de Volumen VSS con múltiples opciones de exfiltración y ofuscación XOR: Lista las copias de sombra de volumen usando VSS y crea una si es necesario Extrae los archivos SAM y SYSTEM de la copia de sombra Utiliza...
netsniff-ng
netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you will, \ ^, ,^ / the Swiss army knife for network |'O\ /O'| . -- packets. ' ' /...
burpsuite-copy-as-xmlhttprequest
Extensión Copy as XMLHttpRequest para BurpSuite La extensión añade un menú contextual a BurpSuite que permite copiar múltiples solicitudes como XmlHttpRequest de Javascript, lo que simplifica el desarrollo de PoC al explotar XSS. Instalación descarga el último JAR desde releases o constrúyelo...
tscopy
TScopy Actualizado 2022-03-31 Presentando TScopy Durante un compromiso de Respuesta a Incidentes IR, es necesario tener la capacidad de analizar archivos en el sistema de archivos. A veces, estos archivos están bloqueados por el sistema operativo SO porque están en uso, lo que es particularmente...
goblin
libgoblin Documentazione https://docs.rs/goblin/ registro delle modifiche Utilizzo Goblin richiede rustc 1.85.0 edizione Rust 2024. Aggiungi al tuo Cargo.toml dependencies goblin = "0.10" Caratteristiche nome fantastico del crate implementazione zero-copy, cross-platform, endian-aware per ELF64/3...
CVE-2026-107321
The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce an effective file-type restriction on it, allowing users with the Author role or higher to plant content that, once an administrator runs the import, copies an arbitrary...
CVE-2026-98236
A flaw was found in the Linux kernel's MHI MBIM Modem Host Interface Mobile Broadband Interface Model driver. When receiving network data, the driver ignores the return value of memory copy operations when extracting datagrams. A compromised or malicious modem can supply crafted datagram offsets...
GHSA-GX9W-9QQ8-M485 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-workhorse-ee, typescript, kube-bench, timescaledb-parallel-copy, ldap2pg, wavefront-collector-for-kubernetes, grafana-fips, kube-state-metrics, ldap2pg-fips, vault-fips, timescaledb-parallel-copy-fips, trino, kube-bench-fips, grafana, tigera-operato...
GO-2026-6629 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-workhorse-ee, typescript, kube-bench, timescaledb-parallel-copy, ldap2pg, wavefront-collector-for-kubernetes, grafana-fips, kube-state-metrics, ldap2pg-fips, vault-fips, timescaledb-parallel-copy-fips, trino, kube-bench-fips, grafana, tigera-operato...
CVE-2026-56851 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-workhorse-ee, typescript, kube-bench, timescaledb-parallel-copy, ldap2pg, wavefront-collector-for-kubernetes, grafana-fips, kube-state-metrics, ldap2pg-fips, vault-fips, timescaledb-parallel-copy-fips, trino, kube-bench-fips, grafana, tigera-operato...
GHSA-GX9W-9QQ8-M485 vulnerabilities
Vulnerabilities for packages: grafana, kube-bench, timescaledb-parallel-copy, trino, typescript...
GO-2026-6629 vulnerabilities
Vulnerabilities for packages: grafana, kube-bench, timescaledb-parallel-copy, trino, typescript...
CVE-2026-56851 vulnerabilities
Vulnerabilities for packages: grafana, kube-bench, timescaledb-parallel-copy, trino, typescript...
CVE-2026-19570: Buffer Copy without Checking Size of Input
The LE Audio Broadcast Sink in subsys/bluetooth/audio/bapbroadcastsink.c copies subgroup metadata from a received Basic Audio Announcement BASE into the static Broadcast Audio Scan Service parameter structure modsrcparam without any bounds check. In basesubgroupmetacb the destination element was...
ROS-20261009-73-0260
The vulnerability of the mxuportcalcnumports function in the drivers/usb/serial/mxuport.c module of the Linux device driver framework is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
