4053 matches found
CVE-2006-20001
CVE-2006-20001 一个精心构造的 If: 请求头可能导致在池(堆)内存中超出发送的头部值的位置发生内存读取或写入单个零字节。这可能导致进程崩溃。此问题影响 Apache HTTP Server 2.4.54 及更早版本。 认证| 复杂度| 向量 ---|---|--- 不可用| 不可用| 不可用 机密性| 完整性| 可用性 ---|---|--- 不可用| 不可用| 不可用 CVSS 评分:不可用 参考资料 https://httpd.apache.org/security/vulnerabilities24.html Brut 文件 CVE-2006-20001.json...
CVE-2026-26084
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...
CVE-2026-61410
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
CVE-2026-61410
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
PT-2026-86754
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
CVE-2017-7529
Descripción de CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a un desbordamiento de enteros en el módulo range filter de nginx, lo que resulta en la filtración de información potencialmente sensible provocada por una solicitud especialmente diseñada...
westone-CVE-2021-21972-scanner
westone-CVE-2021-21972-scanner VMware vCenter Server 远程代码执行漏洞。恶意攻击者可以访问 443 端口,向 vCenter Server 发送精心构造的请求,最终导致远程任意代码执行。 安装与使用 git clone https://github.com/Osyanina/westone-CVE-2021-21972-scanner.git cd westone-CVE-2021-21972-scanner cmd CVE-2021-21972.exe 修复建议 将 vCenter Server 7.0 版本升级到 7.0.U1c 将...
CVE-2024-25169-Mezzanine-v6.0.0
Producto: Mezzanine CMS Versión: v6.0.0 Fecha de descubrimiento: 10.01.2024. Fecha de reporte: 10.01.2024. Tipo de vulnerabilidad: Control de acceso incorrecto. ID de CVE: CVE-2024-25169 Descripción: Un problema en Mezzanine v6.0.0 permite a los atacantes eludir los mecanismos de control de acces...
CVE-2019-20367
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:45+00:00| seen| https://t.me/hackingAttack/49652 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45703 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49652 2026-09-02 01:02:04+00:00| seen|...
CVE-2022-40087
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71968 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:35+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:36+00:00| seen|...
CVE-2026-19472 Rockwell Automation ArmorStart® LT Denial Of Service
A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability...
PT-2026-84166
Name of the Vulnerable Software and Affected Versions ArmorStart® LT affected versions not specified Description A denial-of-service issue exists in the embedded web server due to improper handling of a specially crafted HTTP PUT request. This flaw can lead to a loss of web server availability...
CVE-2026-78618
A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request...
CVE-2026-30057
An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...
CVE-2026-30057
free5gc v4.1.0 , an open-source 5G core network implementation, contains a Denial of Service (DoS) vulnerability in the CreateUEContext handler component. An unauthenticated remote attacker can supply a crafted request to trigger the DoS, as reflected by the CVSS 3.1 score of 7.5 (High) with a ne...
EUVD-2026-67108
An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...
CVE-2026-30057
An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...
CVE-2025-61162
Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...
CVE-2025-61162
Cohere North AI v1.1.5 is affected by an incorrect access control flaw in the /api/internal/v1/users/{{USER_ID}} endpoint, which allows an unauthenticated, remote attacker to arbitrarily overwrite user information via a crafted request. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network atta...
CVE-2026-51368
An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...