CVE-2026-43499

CVE-2026-43499 शोषण नोट्स गंभीरता: उच्च CVSS: 7.8 प्रभाव: गोपनीयता, अखंडता, उपलब्धता प्रकाशित: 2026-05-21 तकनीकी सारांश CVE-2026-43499 लिनक्स कर्नेल में एक कमजोरी है, विशेष रूप से rtmutex घटक को प्रभावित करती है, जो रियल-टाइम म्यूटेक्स लॉक के प्रबंधन के लिए जिम्मेदार है। यह कमजोरी रियल-टाइम लॉक क...

CVE-2025-8110

CVE-2025-8110 La gestione impropria dei collegamenti simbolici nell'API PutContents di Gogs consente l'esecuzione locale di codice. Come funziona questo metodo di rilevamento? Estrae la versione di Gogs dal piè di pagina di /user/login tramite regex Gogs Version: X.X.X e segnala le istanze che...

CVE-2023-4696

CVE-2023-4696 Compromissione dell'account dovuta alla gestione impropria dei token JWT in memos v0.13.2 Descrizione Voglio far luce su un'importante vulnerabilità di sicurezza che ho recentemente scoperto nel sistema usememos/memos. Questa vulnerabilità ha il potenziale di consentire a qualsiasi...

CVE-2025-6713

CVE-2025-6713 criar pipeline de agregação para acessar dados sem autorização adequada devido ao manuseio impróprio de $mergeCursors no MongoDB v8.0 v7.0 v6.0 6.0.22 instalação não é muito difícil - basta usar pip3 para instalar os requisitos: pip install -r requirements uso root@kitploit: python3...

CVE-2026-19653

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

EUVD-2026-62661

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

CVE-2026-17084

The "stringprep" module didnt process characters from RFC 3454 tables...

The vulnerability of the ceph kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ceph kernel component in the Linux operating system is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btrfs/tree-log.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfs/tree-log.c component in the Linux operating system’s kernel is related to improper handling of conflicting special elements. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-54939

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up. When managerelationship is used with onlookup: :relate on a belongsto...

CVE-2026-48323

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

EUVD-2026-51018

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-48586

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

UBUNTU-CVE-2026-49158

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

EUVD-2026-49182

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

CVE-2026-56537

HCL Connections is affected by CVE-2026-56537, a information disclosure vulnerability caused by improper handling of request data. The issue is labeled as a LOW-severity concern (CVSS v3.1: 3.5) with network attack vector, low attack complexity, and user interaction required. It could allow an au...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Handling of Structural Elements (CVE-2026-23154)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505600; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

PT-2026-64883

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data, known as data amplification, exists in the Apache Thrift Ruby bindings. This issue occurs during ZLIB decompression within the THeaderTransport...

PT-2026-64899

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Handling of Structural Elements (CVE-2026-43033)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505632; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...