MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2025-62168

CVE-2025-62168 — PoC per la perdita di token in Squid Proxy L'autore non si assume alcuna responsabilità per usi impropri o danni causati da questo strumento. La ricerca è fornita esclusivamente a scopo educativo e difensivo. Descrizione Questo repository contiene un Proof-of-Concept PoC per...

EUVD-2026-66496

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2021-20323

CVE-2021-20323 Descrizione Keycloak prima della versione 18.0.0 e dopo la 10.0.0 contiene una XSS riflessa sull'endpoint clients-registrations. Il bug viene attivato fornendo, tramite POST, una struttura JSON con una chiave come nome del parametro che non è supportata dall'endpoint. La risposta...

CVE-2017-9822

CVE-2017-9822 Deserializzazione del cookie DotNetNuke – Esecuzione remota di codice RCE Le versioni di DotNetNuke DNN comprese tra 5.0.0 e 9.3.0 sono affette da una vulnerabilità di deserializzazione che porta all'esecuzione remota di codice RCE. DotNetNuke utilizza il cookie DNNPersonalization p...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Utilizzo root@kitploit: $ docker-compose up Utilizzo da Docker Hub root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master ·...

CVE-2023-29489

Einleitung Eine ausnutzbare reflektierte Cross-Site-Scripting XSS-Sicherheitslücke wurde in bestimmten Versionen von cPanel entdeckt und mit der CVE-2023-29489 gekennzeichnet. Diese Sicherheitslücke ermöglicht es Angreifern, beliebigen JavaScript-Code ohne Authentifizierung auszuführen. Die...

CVE-2019-10092

CVE-2019-10092: Cross-Site Scripting limitato tramite pagina "Proxy Error" in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, è stato segnalato un problema di cross-site scripting limitato che interessava la pagina di errore di modproxy. Un aggressore potrebbe causare la deformazione del...

CVE-2026-79769

A flaw was found in Nokogiri. This vulnerability involves a possible invalid memory read in the internal Nodeinitializecopywithargs helper. If application code calls this protected method with an incorrect argument type, such as a non-Node object, it can lead to an out-of-bounds read, causing the...

CVE-2026-81676

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

CVE-2026-81674

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

EUVD-2026-67012

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

CVE-2026-81676 Multiple Vulnerabilities in TOOOLS' iSquad

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

CVE-2026-81676

CVE-2026-81676 is an error-based SQL injection in TOOOLS' iSquad , affecting the endpoint /ws/apitribuna/ultimosVideos. The limit_videos parameter is directly concatenated into a MariaDB SQL query without sanitization or parameterization, allowing a remote, unauthenticated attacker to inject SQL ...

EUVD-2026-67010

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

CVE-2026-35250

CVE-2026-35250 मेरा पहला CVE 2.3 है DevVGAVBVA पर Integer Overflow विशेषाधिकार प्राप्त गेस्ट से DoS हो सकता है AI-सहायता प्राप्त खोज और PoC पूरी तरह से AI द्वारा लिखा गया है समस्या src/VBox/Devices/Graphics/DevVGAVBVA.cpp:740-743 पर है, जहाँ ASSERTGUESTMSGRETURN में आयाम जाँच || OR का उपयोग करती...

CVE-2026-80565

A flaw was found in the Linux kernel's crypto: qce component. An error in the devmqceregisteralgs function's error handling path causes the system to repeatedly attempt to unregister algorithms incorrectly when a registration fails. This improper handling of resources could lead to system...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python-Proof-of-Concept für CVE-2026-0073. Das Skript wurde mit KI-gestützten Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein Logikfehler in der Zertifikatsprüfung des ADB-Daemons...

CVE-2025-62168

CVE-2025-62168 Divulgazione di informazioni nel proxy Squid nella gestione degli errori Scanner Rilevamento e PoC "A causa di una mancata oscuramento delle credenziali di autenticazione HTTP Squid è vulnerabile a un attacco di divulgazione di informazioni. Gravità: Questo problema consente a uno...

CVE-2026-20817

CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Descrizione Questo repository contiene una Proof-of-Concept PoC per CVE-2026-20817 , una vulnerabilità di escalation dei privilegi locale nel servizio Windows Error Reporting WER. La vulnerabilità consente a un utente...