CVE-2026-54085

Wazuh (open-source XDR/SIEM platform), versions 4.2.0 through 4.14.6 , contains missing input validation in multiple active response scripts that pass attacker-influenced alert fields to privileged system commands running as root. Five scripts (route-null.c, netsh.c, pf.c, npf.c, ipfw.c ) omit th...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Solidity-Assembly: Verwechslung der Rückgabedatengröße Programmcode Solidity root@kitploit: // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret = target.callabi.encodeWithSignature"someFunc";...

CVE-2026-81528

A MongoDB C driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted,...

AWS-Tough-Library-Multiple-CVEs

AWS Tough लाइब्रेरी में कई CVE मार्च 2025 में, AWS Labs के Tough लाइब्रेरी TUF – द अपडेट फ्रेमवर्क का Rust क्लाइंट इम्प्लीमेंटेशन में कई सुरक्षा कमजोरियों का खुलासा हुआ। ये मुद्दे CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 और CVE-2025-2888 के अंतर्गत ट्रैक किए गए हैं, और इन्हें Tough संस्करण...

CVE-2021-3656-Demo

CVE-2021-3656: Questo problema è causato dalla mancanza di validazione del campo virtext del VMCB e consente a un guest L1 malintenzionato di disabilitare sia gli intercept di VMLOAD/VMSAVE che VLS Virtual VMLOAD/VMSAVE per il guest L2. In queste circostanze, il guest L2 è in grado di eseguire...

EUVD-2026-67212

A MongoDB C driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted,...

CVE-2026-81523 Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

CVE-2026-81523

A missing input-validation flaw in MongoDB libmongocrypt 's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The CVELIST record further specifies the mechanism as dot/NUL injection in namespace strings, enabling cross-tenant data...

EUVD-2026-67167

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have assigned compliance frameworks from namespaces they were not authorized to access to their own...

CVE-2022-1565

Plugin WordPress WP All Import = 3.6.7 - Esecuzione di codice da remoto RCE Autenticato root@kitploit: Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm:...

CVE-2026-81092

mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamablehttp.go and SSEServer.ServeHTTP in server/sse.go served any request arriving over a loopback connection regardless of the host it named, and the SSE transport's...

CVE-2026-80526

A flaw was found in the Linux kernel's ASoC Audio System on Chip tas2562 driver. The tas2562volumecontrolput function lacks proper validation of control values provided by userspace. A local attacker could exploit this by supplying a specially crafted value, leading to an array overflow and an...

EUVD-2026-66488

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforceprocesspacket reads fixed fields from joystick, wheel and status packets without first checking their lengths. In particular, the shared hats-and-buttons helper unconditionally...

EUVD-2026-66882

The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO...

EUVD-2026-66837

Spring Data REST does not guard identifier @Id and version @Version properties against mutation via RFC 6902 JSON Patch application/json-patch+json requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7....

CVE-2026-25126

CVE-2026-25126: Manipulation der Abstimmungszahlen in PolarLearn Forschung: Joshua van Rijswijk Beschreibung PoC für CVE-2026-25126 , eine Sicherheitslücke mit hohem Schweregrad in der Geschäftslogik der PolarLearn-Forum-Abstimmungs-API. Der Endpunkt POST /api/v1/forum/vote erzwingt keine strenge...

CVE-2021-41730

TENDA: удаленное выполнение команд после авторизации Автор эксплойта: SHENGXI [email protected] Вендор: TENDA CVE-2021-41730 - /bin/httpd Версия прошивки: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Ссылка на оборудование:...

CVE-2026-5201

CVE-2026-5201 Estouro de buffer baseado em heap no carregador JPEG do gdk-pixbuf Olá, sou Kağan Çapar. Descobri uma vulnerabilidade de estouro de buffer baseado em heap no carregador de imagens JPEG do gdk-pixbuf que afeta praticamente todos os ambientes de desktop Linux. A vulnerabilidade recebe...

CVE-2026-33317

CVE-2026-33317 OP-TEE PKCS11 PoC Questo repository contiene la proof of concept per il Normal World, le note di riproduzione e i log catturati per CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. L'avviso ufficiale OP-TEE descrive una validazione mancante in entrygetattributevalue per...

CVE-2025-49132-PoC

CVE-2025-49132-PoC Prova de conceito para CVE-2025-49132 para execução remota de código no Pterodactyl Panel -m check Do something funny python3 poc.py -u -m exploit -p -t Detalhes Técnicos Analisando o git diff do LocaleController.php entre v1.11.10 e v1.11.11 link, podemos ver que o controller...