21294 matches found
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-21863)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505955; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-64552)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505986; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-46132)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506026; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-46046)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506024; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-64560)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506004; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
Security Bulletin: IBM i is Affected by an Improper Validation Vulnerability in zlib [CVE-2026-27171]
Summary Zlib for IBM i is vulnerable to increased CPU consumption when using functions crc32combine64 and crc32combine64gen64 CVE-2026-27171 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-27171 DESCRIPTION: zlib before 1.3.2 allows CPU consumption via...
CVE-2026-0848
CVE-2026-0848 โ NLTK StanfordSegmenter: ไฟก้ ผใงใใชใJARใฎ่ชญใฟ่พผใฟใซใใไปปๆใณใผใๅฎ่ก -red?style=for-the-badge -brightgreen?style=for-the-badge ๆฆ่ฆ ใใฃใผใซใ| ่ฉณ็ดฐ ---|--- CVE ID| CVE-2026-0848 ใใใฑใผใธ| nltk Natural Language Toolkit ใฌใธในใใช| PyPI ๅฝฑ้ฟใๅใใใใผใธใงใณ| = 3.9.2 ่ๅผฑๆงใฟใคใ| CWE-20: ไธ้ฉๅใชๅ ฅๅๆค่จผ CVSSในใณใข| 10.0 Critical ๆปๆๅ ๅบๅ| ใใใใฏใผใฏ...
CVE-2026-47542
A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...
CVE-2026-0848-PoC-Improper-Input-Validation
CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC โ ๏ธ ๊ฒฝ๊ณ ์ด ์ฝ๋๋ ์์คํ ์์ ์์์ ๋ช ๋ น์ ์คํํฉ๋๋ค. ๊ฒฉ๋ฆฌ๋ ๊ฐ์ ๋จธ์ ๋๋ ์ปจํ ์ด๋์์๋ง ์ฌ์ฉํ์ธ์. ์ค๋ช CVE-2026-0848์ ๋ํ ๊ธฐ๋ฅ์ PoC์ ๋๋ค. ์ ์ฑ JAR ํ์ผ์ด NLTK์ ์ํด ๋ก๋๋ ๋ ์์์ ์ฝ๋๋ฅผ ์คํํ ์ ์๋ ๋ฐฉ๋ฒ์ ๋ณด์ฌ์ค๋๋ค. ์๊ตฌ ์ฌํญ Python 3.8+ Java JDK 8+ payload ์ปดํ์ผ์ฉ NLTK 3.9.2 ์๋์ผ๋ก ์ค์น๋จ ์ค์น ๋ฐ ์คํ ํด๋ก git clone...
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...
EUVD-2025-211022
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability. This flaw could allow an attacker to inject unvalidated, malformed data into the application, potentially leading to injection attacks or causing errors in downstream processing systems . No specific affected...
CVE-2025-31980 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...
CVE-2025-60012-POC
๊ต์ก ๋ฐ ๋ณด์ ์ฐ๊ตฌ ๋ชฉ์ ์ผ๋ก๋ง ์ฌ์ฉํ์ญ์์ค. ๊ทํ๊ฐ ์์ ํ์ง ์๊ฑฐ๋ ํ ์คํธ์ ๋ํ ๋ช ์์ ์๋ฉด ํ๊ฐ๋ฅผ ๋ฐ์ง ์์ ์์คํ ์ ์ฌ์ฉํ์ง ๋ง์ญ์์ค. โ์ ์ฒด ๋ฉด์ฑ ์กฐํญ CVE-2025-60012 โ Apache Livy ๋ฌด๋จ ํ์ผ ์ ๊ทผ -yellow ๊ฐ์ ํ๋| ์ธ๋ถ ์ ๋ณด ---|--- CVE ID| CVE-2025-60012 ์ฌ๊ฐ๋| ์ค๊ฐ CVSS 6.3 ์ํฅ์ ๋ฐ๋ ๋ฒ์ | Apache Livy 0.7.0-incubating, 0.8.0-incubating โ Apache Spark 3.1 ์ด์์ ์ฐ๊ฒฐ๋ ๊ฒฝ์ฐ ์์ ๋ฒ์ | Apache...
CVE-2026-103063
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
CVE-2026-102394 WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through 6.8.4...
CVE-2026-103339 WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet Metform metform allows Stored XSS.This issue affects Metform: from n/a through 4.3.0...
CVE-2026-103339
The WordPress Metform plugin (versions
CVE-2026-103343 WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP ManageNinja LLC FluentForm fluentform allows Stored XSS.This issue affects FluentForm: from n/a through 6.2.14...
CVE-2026-103343
The FluentForm plugin for WordPress (versions up to and including 6.2.14 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. This issue is caused by the improper neutralization of input during web page generation within the plugin. An attacker could potentially execute malicious scripts ...