993 matches found
Manual-Web-Penetration-Testing-and-Core-Vulnerability-Exploitation
Manual-Web-Penetration-Testing-and-Core-Vulnerability-...
Security Bulletin: Vulnerability in Spring-core affects IBM Netezza Appliance
Summary The Spring-core package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41842 Vulnerability Details CVEID:CVE-2026-41842 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Denial of Service DoS attacks when resolving stati...
WordPress < 7.0.3 - CSS Injection vulnerability
CSS Injection vulnerability discovered by Anthropic in WordPress core versions 7.0.3...
WordPress < 7.0.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by HDWSec in WordPress core versions 7.0.3...
Wordpress < 7.0.3 - Unauthenticated Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure vulnerability discovered by Ehtisham Siddiqui in WordPress core versions 7.0-7.0.2...
Linux Distros Unpatched Vulnerability : CVE-2026-18401
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000...
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to linkify-it and httpcore5 (CVE-2026-59887, CVE-2026-54428 & CVE-2026-54399)
Summary IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to linkify-it and httpcore5. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor Component uses HdrHistogram-2.2.2.jar, logback-core-1.5.32.jar which are vulnerable to CVE-2026-14683, CVE-2026-14684, CVE-2026-14685, CVE-2026-14686, CVE-2026-10532 and CVE-2026-9828. Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION:...
org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers
A flaw was found in Apache HttpComponents Core. This uncontrolled resource consumption vulnerability in the HTTP/1.1 message parser allows a remote attacker to cause a denial of service through memory exhaustion. This can be triggered by sending messages with an excessive number of headers or...
MiracleLinux 9 : dotnet9.0-9.0.118-1.el9_8.ML.1 (AXSA:2026-1381:14)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1381:14 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...
Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-49356)
Summary IBM Security SOAR uses an older version of the @babel/core component that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.10.2 Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION:...
Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-11332)
Summary IBM Security SOAR uses an older version of the ansible-core component that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.10.2 Vulnerability Details CVEID:CVE-2026-11332 DESCRIPTION: ...
Core Oracle WebLogic Server Auth Bypass
Уязвимость компонента Core сервера приложений Oracle WebLogic Server связана с неконтролируемым расходом ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ на чтение, создание, удаление и изменение данных...
Linux Distros Unpatched Vulnerability : CVE-2026-47047
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-47055
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-60150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-47054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-47041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-60159
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Difficult to explo...