CVE-2026-26457

ccoap at commit 77f55c4b contains a null pointer dereference in the coap_dump_msg() function. The bug is triggered when processing COAP messages that include options with zero length. No CVSS score, confirmed fix version, or in-the-wild exploitation details are provided in the available documents...

CVE-2026-47860 Unbounded decompression of attacker-supplied compressed message bodies

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-47860

CVE-2026-47860 affects Spring AMQP and stems from unbounded decompression of attacker-supplied compressed message bodies. An attacker with the ability to publish to a queue consumed by an application with message decompression enabled can crash the consumer JVM using a single message of approxima...

CVE-2025-1868

CVE-2025-1868: Advanced IP Scanner & Advanced Port Scanner NTLM Leakage HTTP Tester Kleine dockerisierte PHP-App, die einen NTLM-Handshake auslöst und die behauptete Domain , Benutzer und Workstation aus NTLM-Typ-3-Nachrichten extrahiert. Es validiert keine Passwörter. Es speichert keine...

poc-cve-xss-encoded-wp-inventory-manager-plugin

更新 - 2023年5月10日 CVE-2023-2123 ID 已保留，PoC 已在 WPScan 网站发布：https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 详细说明 标题：WordPress CMS 的 WP Inventory Manager 插件中未经身份验证的反射型跨站脚本漏洞 日期：2023-04-15 作者：Danilo Albuquerque 供应商主页：https://wordpress.org 软件链接：https://wordpress.org/download...

CVE-2026-16809

CVE-2026-16809 affects LimeSurvey Community Edition 7.0.5 and is a stored cross-site scripting (XSS) vulnerability in the survey quota creation workflow. An authenticated low-privileged user with the ability to create and manage their own survey can store malicious JavaScript in a quota message ,...

CVE-2026-16809 LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...

CVE-2026-16809 LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...

CVE-2020-15392

CVE-2020-15392 Enumerazione utenti su Supravizio BPM 10.1.2 Descrizione È stata riscontrata una vulnerabilità di enumerazione degli utenti in Supravizio BPM, versione 10.1.2. Il problema si verifica durante il recupero della password, dove una differenza nei messaggi potrebbe consentire a un...

CVE-2024-39719

Анализ уязвимости раскрытия существования файлов в Ollama CVE-2024-39719 中文 Обзор уязвимости CVE-2024-39719 — это уязвимость раскрытия информации о существовании файлов, затрагивающая Ollama версии 0.3.14 и более ранние. Эта уязвимость позволяет злоумышленникам определять наличие конкретных файло...

CVE-2023-3897

CVE-2023-3897 Eine Benutzernamen-Enumeration ist durch Umgehung des CAPTCHA in der On-Premise SureMDM-Lösung auf Windows-Bereitstellung möglich. Der Angreifer kann lokale Benutzerinformationen über Fehlermeldungen enumerieren. Dieses Problem betrifft SureMDM On-Premise: Version 6.31 und niedriger...

cve-2023-34040

CVE-2023-34040 Spring Kafka 反序列化远程代码执行 root@kitploit: POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36 Accept:...

CVE-2018-10933

CVE-2018-10933 - Preuve de Concept de contournement d'authentification SSH Description CVE-2018-10933 est une vulnérabilité de contournement d'authentification dans l'implémentation côté serveur de libssh. La faille permet à un attaquant d'envoyer un message SSH2MSGUSERAUTHSUCCESS sans...

MSMQ-Vulnerability

Laboratorio di Sicurezza MSMQ Questo repository documenta una revisione controllata in laboratorio dell'esposizione di sicurezza di Microsoft Message Queuing, concentrandosi su validazione difensiva, evidenze di rilevamento e pianificazione della mitigazione. Il progetto è posizionato come...

POC-CVE-2018-4327-and-CVE-2018-4330

brokentooth POC para CVE-2018-4327 pelo menos é o que eu acho, já que CVE-2018-4327 e CVE-2018-4330 foram ambos relatados por @SparkZheng, mas não diz qual se refere a qual bug, mas como ele descreveu este primeiro, então estou supondo. Testado no iPhone 6S 11.3.1 Deve funcionar até o 11.4 Permit...

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF 摘要 Trivision NC-227WF 固件 5.80（构建于 20141010）的登录机制根据用户名是否存在返回不同的错误消息（"Unknown user" vs "Wrong password"），从而允许攻击者枚举有效用户名。引用的 CVE 记录已发布到 CVE 列表/NVD。 影响 用户名枚举，支持针对性暴力破解或凭据填充攻击。 结合凭据窃取或弱密码，增加了未经授权访问的风险。 观察到的行为/示例 根据用户名有效性返回不同的错误消息。 观察到的响应示例： "Unknown user" — 用户名不存在。...

intelmq

docs/index.md...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-76784 Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

EUVD-2026-66641

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...