CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution. Example nc -lvp 9000 python ./CVE-2019-10149/exploit.py --rhost example.com --rport...

qt5-qtdeclarative security update

An update is available for qt5-qtdeclarative. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative:...

RLSA-2026:98531 Important: qt5-qtdeclarative security update

Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...

day01-sessionreaper-lab

Day 1 — SessionReaper-style Vulnerable Lab Educational This is a tiny lab that simulates the core idea reported for CVE-2025-54236 “SessionReaper”: improper validation of nested JSON leading to dangerous code paths. This is not Magento/Adobe Commerce; it's a minimal educational replica to practic...

CVE-2025-50944

CVE-2025-50944 Improper Certificate Chain Validation in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-295: Improper Certificate Validation CVSS : 8.8 HIGH Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 2. Summary...

kkFileView 4.0 - Server-Side Request Forgery

kkFileView 4.0 contains a server-side request forgery caused by improper validation in OnlinePreviewController.java, letting attackers induce the server to make arbitrary requests, exploit requires sending crafted requests. id: CVE-2022-42149 info: name: kkFileView 4.0 - Server-Side Request Forge...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

Gradio - Open Redirect

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

CVE-2026-51954

Product: Webasyst Framework Affected Version: ≤ 4.0.3 Severity: High CVSS 3.1: 8.0 Description Webasyst Framework through 4.0.3 contains an OAuth 2.0 implementation flaw that allows a remote, unauthenticated attacker to intercept authorization credentials issued during the OAuth flow, without...

cve-2018-12798

Adobe Acrobat Reader Heap Overflow Remote Code Execution Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of...

CVE-2026-0101

Improper validation of specified quantities in input within AMD Power Management Firmware PMFW could allow a local attacker to pass unsanitized input, potentially resulting in a system crash or denial of service...

Important: Red Hat Security Advisory: qt5-qtdeclarative security update

An update for qt5-qtdeclarative is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2026-146011

Improper validation of specified quantities in input within AMD Power Management Firmware PMFW could allow a local attacker to pass unsanitized input, potentially resulting in a system crash or denial of service...

CVE-2026-0101: AMD: Improper validation of specified quantities in input within AMD Power Management Firmware (PMFW) could allow a local…

Improper validation of specified quantities in input within AMD Power Management Firmware PMFW could allow a local attacker to pass unsanitized input, potentially resulting in a system crash or denial of service...

RHEL 9 : qt5-qtdeclarative (RHSA-2026:99127)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99127 advisory. Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser...

CVE-2021-24762

Overview This repository documents the detection of CVE-2021-24762, a vulnerability identified on a WordPress instance through HTTP scanning. The vulnerability was discovered on the WordPress AJAX endpoint: /wp-admin/admin-ajax.php This endpoint is commonly used by WordPress plugins and themes to...

CVE-2026-22444

CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview CVE-2026-22444 is a security vulnerability affecting Apache Solr, publicly disclosed around January 20, 2026. The vulnerability stems from insufficient input validation CWE-20: Improper Input Validation on certain API parameter...

Important: Red Hat Security Advisory: qt5-qtdeclarative security update

An update for qt5-qtdeclarative is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Oracle Linux 8 : qt5-qtdeclarative (ELSA-2026-96075)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-96075 advisory. 5.15.3-3 - CVE-2025-12385 qt5-qtdeclarative: Improper validation of tag size in Text component parser Resolves: RHEL-287799 Tenable has extracted the preceding...

RHEL 9 : qt5-qtdeclarative (RHSA-2026:98531)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98531 advisory. Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser...