VulnCheck KEV: CVE-2026-93622

Unauthenticated Cross Site Scripting XSS in WPS Limit Login = 1.5.9.3 versions...

CVE-2026-98126

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOCFLZERORANGE is used without FALLOCFLKEEPSIZE, smb3zerorange may extend EOF without checking RLIMITFSIZE, allowing the file to grow beyond the caller's file-size limit. Fix th...

UBUNTU-CVE-2026-98126

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOCFLZERORANGE is used without FALLOCFLKEEPSIZE, smb3zerorange may extend EOF without checking RLIMITFSIZE, allowing the file to grow beyond the caller's file-size limit. Fix th...

Oracle Linux 9 : perl-DBI (ELSA-2026-71422)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71422 advisory. 1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327 Tenable has extracted the preceding description block directly from the...

xmlrpc-brute

WordPress XML-RPC Bruteforce Tool A tool designed to test WordPress sites for XML-RPC vulnerabilities by attempting to brute force user credentials through the XML-RPC interface. Description This tool tests WordPress installations for XML-RPC authentication vulnerabilities. It can perform standar...

CVE-2025-10230

CVE-2025-10230 PoC para CVE-2025-10230 - Inyección de comandos en el hook WINS de Samba La configuración requerida para esta vulnerabilidad probablemente afecta a 0 personas. La inyección está limitada a 15 caracteres y debe ser un nombre WINS válido, por lo que no ;...

CVE-2025-61301

CVE-2025-61301 - CAPEv2: 通过递归进程分叉实现的分析拒绝 描述 一个高严重性 的分析拒绝漏洞影响CAPEv2（提交52e4b43，2025-05-17）中的reporting/mongodb.py和reporting/jsondump.py，允许可以提交样本的攻击者通过生成深度嵌套或过大的行为数据来触发MongoDB BSON限制或orjson递归错误，从而导致行为分析报告不完整或缺失，当样本在沙箱中执行时。 CVSS评分 CVSS v3.1: 7.5 高 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 作者/研究...

DEBIAN-CVE-2026-93240

In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit knob inert The v1 soft limit has been deprecated since v6.12 and nobody has reported depending on it. Start the removal by decoupling the interface from the implementation: keep...

AZL-103559 CVE-2026-93240 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit knob inert The v1 soft limit has been deprecated since v6.12 and nobody has reported depending on it. Start the removal by decoupling the interface from the implementation: keep...

CVE-2026-93240

In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit knob inert The v1 soft limit has been deprecated since v6.12 and nobody has reported depending on it. Start the removal by decoupling the interface from the implementation: keep...

CVE-2026-93240 memcg: make the v1 soft limit knob inert

In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit knob inert The v1 soft limit has been deprecated since v6.12 and nobody has reported depending on it. Start the removal by decoupling the interface from the implementation: keep...

CVE-2026-93240

The Linux kernel includes a fix for the memcg subsystem to make the v1 soft limit knob inert. The v1 soft limit was deprecated in version v6.12 ; the update decouples the interface from the implementation by ignoring writes to memory.soft_limit_in_bytes and reporting the maximum value on read. Th...

CVE-2026-93240 memcg: make the v1 soft limit knob inert

In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit knob inert The v1 soft limit has been deprecated since v6.12 and nobody has reported depending on it. Start the removal by decoupling the interface from the implementation: keep...

CVE-2026-93240

In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit knob inert The v1 soft limit has been deprecated since v6.12 and nobody has reported depending on it. Start the removal by decoupling the interface from the implementation: keep...

mountain_goat

Hola, soy una cabra montesa y voy a embestir tus conexiones TCP, porque eso es algo muy de cabras. Esta es una PoC que demuestra técnicas que explotan CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous por Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, Srikanth V...

Dynamic record lifting can allocate beyond the hostcall fuel limit

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqpg-j7w6-42pr For more information see the GitHub-hosted security advisory...

CVE-2016-16113-POC

Get RCE - Bludit CMS 漏洞利用工具 | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| 一个自动化利用工具，结合了 CVE-2019-17240 （认证绕过）和 CVE-2019-16113 （任意文件上传），可在易受攻击的 Bludit CMS 安装上实现远程代码执行。 ⚠️ 法律免责声明 仅限授权的安全测试...

perl-DBI security update

1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327...

CVE-2026-66067

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...

Linux Distros Unpatched Vulnerability : CVE-2026-66067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/us...