9455 matches found
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the ReadXBMImage function. An attacker can execute arbitrary code, cause a denial of service, or access sensitive information by submitting a specially crafted XBM image file for processing. Workaround...
PT-2026-3676
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 25.2 Description An easily exploitable issue exists in the Server Infrastructure component of Oracle Siebel CRM. An unauthenticated attacker with network access via TLS can compromise Siebel CRM...
Zoom Node Meetings Hybrid and Zoom Node Meeting Connector security vulnerabilities
Zoom Node Meetings Hybrid and Zoom Node Meeting Connector are both products of the American company Zoom. Zoom Node Meetings Hybrid is a hybrid cloud deployment solution. Zoom Node Meeting Connector is a meeting service module. Both Zoom Node Meetings Hybrid and Zoom Node Meeting Connector have...
Oracle Siebel CRM security vulnerabilities
Oracle Siebel CRM is a customer relationship management solution developed by Oracle Corporation in the United States. This solution includes modules for sales management, marketing management, customer service systems, and call centers. There were security vulnerabilities in the Siebel CRM...
CVE-2026-1190
A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Assertion Markup Language SAML setup, it fails to validate the NotOnOrAfter timestamp within the SubjectConfirmationData. This allows an attacker to delay the expiration of SAML...
CVE-2026-22858
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = ...
CVE-2026-0386
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network...
red-team-arsenal
🎯 Red Team Arsenal !Versionhttps://img.shields.io/badge/...
CVE-2025-14379 Testimonials Creator 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
The Testimonials Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject...
The vulnerability of the Windows Deployment Services service allows a perpetrator to execute arbitrary code.
The vulnerability of Windows Deployment Services for Windows operating systems is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability fixed in Microsoft SQL Server
Microsoft has fixed a vulnerability in SQL Server A malicious party can exploit the vulnerability to gain unauthorized access to DEBUG functionality and thereby generate, among other things, memory dumps. These dumps can also involve memory outside the scope of SQL Server, allowing the malicious...
CVE-2026-0386
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-0386
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-0386
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability
...
CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability
...
CVE-2026-0386
CVE-2026-0386 : Windows Deployment Services has an improper access control vulnerability that can allow an adjacent-network attacker to execute code remotely. This entry is supported by multiple sources confirming the issue and indicating Microsoft has released January 2026 security updates to ad...
January 13, 2026—KB5073723 (OS Build 17763.8276)
None None...