Lucene search
+L

174 matches found

Kitploit
Kitploit
•added 2026/10/10 10:29 a.m.•7 views

CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026

CYBERDUDEBIVASH MONGODB 检测工具 v2026.1 检测暴露的 MongoDB 实例和 CVE-2025-14847 "MongoBleed" 风险 — 零信任 Python 扫描器。 2026 年,配置不当的 MongoDB 数据库仍然是数据泄露和勒索软件攻击的主要原因之一。此工具帮助防御者识别开放端口、未认证访问以及潜在的堆泄漏漏洞。 功能特性 端口 27017 检测 未认证访问检查 CVE-2025-14847 MongoBleed PoC 检测 JSON 报告输出 详细模式实时反馈 100% 本地执行(无云端依赖) 使用方法 pip install...

8.7CVSS8AI score0.83218EPSS
SaveExploits39
Kitploit
Kitploit
•added 2026/10/10 9:24 a.m.•14 views

CVE-2019-6207

CVE-2019-6207 getdirentriesattr kernel heap inofo leak Esta vulnerabilidad puede desencadenarse en el sandbox en macOS=10.14.4 && iOS 12.2 Actualizaré más detalles sobre esta vulnerabilidad...

5.5CVSS7.6AI score0.00745EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/10 5:08 a.m.•20 views

ctl_ctloutput-leak

ctlctloutput-leak La función ctlctloutput en macOS High Sierra 10.13 ignora el valor de retorno de una llamada a sooptcopyin, lo que abre una ventana de carrera para filtrar datos no inicializados del heap del kernel al espacio de usuario. ctlctloutput-leak es un exploit de prueba de concepto que...

5.5CVSS6.9AI score0.0471EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•5 views

AlmaLinux 9.2 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools (ALMALINUX9.2:CLSA-2026:1778891359)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778891359 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

5.1CVSS6.8AI score0.00163EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•6 views

PT-2026-102921

CVE advisory: CVE-2026-101303 - netapp: CVE-2026-101303 FreeBSD Vulnerability in NetApp Products. https://t.co/xyNSpbtc1N CVE CyberSecurity NetApp FreeBSD...

5.8AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/21 4:35 p.m.•10 views

SUSE CVE-2026-90000

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...

8.8CVSS6AI score0.00412EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/17 4:12 p.m.•34 views

CVE-2026-93174

CVE-2026-93174 affects the Linux kernel BPF subsystem. In copy_map_value_long(), the function passes map->value_size to bpf_obj_memcpy() instead of the correctly padded round_up(map->value_size, 8). When a per-CPU map contains special fields, bpf_obj_memcpy() copies around those fields with...

6AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/16 11:17 a.m.•12 views

AZL-101123 CVE-2026-90000 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...

8.8CVSS6AI score0.00412EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 11:17 a.m.•15 views

DEBIAN-CVE-2026-90000

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...

8.8CVSS6.1AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 11:17 a.m.•15 views

CVE-2026-90000

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...

8.8CVSS0.00412EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/16 11:16 a.m.•11 views

DEBIAN-CVE-2026-89846

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rspinfolen to avoid OOB sense-data read In qla2x00statusentry, the FWI2 status path advances sensedata and shrinks parsenselen by rspinfolen: if ISFWI2CAPABLEha sensedata += rspinfolen; parsenselen -=...

9.1CVSS5.9AI score0.00714EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 10:33 a.m.•21 views

CVE-2026-90000 HID: rmi: fix OOB access with undersized RMI reports

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...

8.8CVSS6AI score
SaveExploits0References11
EUVD
EUVD
•added 2026/09/16 10:33 a.m.•18 views

EUVD-2026-80608

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...

8.8CVSS6AI score0.00412EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/16 10:33 a.m.•42 views

CVE-2026-90000 HID: rmi: fix OOB access with undersized RMI reports

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...

8.8CVSS0.00412EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/16 10:31 a.m.•43 views

CVE-2026-89865 scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers stage their transfer in a DMAPOOLSIZE 256-byte bounce buffer obtained from dmapoolalloc, which does not zero the allocation. They initialize...

0.00211EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/16 9:17 a.m.•11 views

AZL-101265 CVE-2026-89779 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

9.1CVSS6.4AI score0.00697EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 9:17 a.m.•14 views

CVE-2026-89779

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

9.1CVSS0.00697EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/16 9:17 a.m.•14 views

UBUNTU-CVE-2026-89779

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

9.1CVSS6.5AI score0.00697EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/09/16 9:17 a.m.•23 views

CVE-2026-89779

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

9.1CVSS6.4AI score0.00697EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/09/16 8:48 a.m.•16 views

EUVD-2026-80300

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

9.1CVSS6.4AI score0.00697EPSS
SaveExploits0References7
Rows per page
Query Builder