686 matches found
poc-cve-2024-23897
poc-cve-2024-23897 यह कोड CVE-2024-23897 के तहत एक प्रूफ ऑफ कॉन्सेप्ट लिखने का मेरा प्रयास है। यह आपको कमजोर args4j मॉड्यूल के माध्यम से हमला किए गए मशीन पर RCE करने की अनुमति देता है। उपयोग कैसे करें: go run poc.go http://127.0.0.1:8888/ /etc/passwd...
CVE-2026-47078 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
kernel: tipc: fix double-free in tipc_buf_append()
A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...
BIT-NGINX-2026-60005 NGINX ngx_http_slice_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
Updated nginx packages fix security vulnerabilities
ngxhttpproxyv2module and ngxhttpgrpcmodule vulnerability. CVE-2026-42055 ngxhttpcharsetmodule vulnerability. CVE-2026-48142...
CVE-2026-60005
NGINX Plus and NGINX Open Source are affected by a vulnerability in the ngx_http_slice_module. When the slice directive and unnamed regex captures are configured, or during a background cache update, unauthenticated remote attackers can trigger uninitialized memory access in the worker process, p...
CVE-2026-58556
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-44658
Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability...
The vulnerability of the Python programming language’s pip module, related to the inclusion of functions from an unreliable and uncontrolled area, allows a perpetrator to execute arbitrary code.
The vulnerability of the Python programming language’s pip module is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
CVE-2026-56187
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
PyMuPDF has a path traversal in _main_.py
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
CVE-2026-41880
CVE-2026-41880: R-SOFT DMS OCR module is vulnerable to OS Command Injection via unsanitized user-controllable file paths passed to the system shell through SSH. An authenticated attacker triggering OCR on an uploaded file can execute commands as root. The issue is mitigated by fixes in v3.19-2862...
UBUNTU-CVE-2026-7017
HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, mayberedirect follows the Location: header and prepareheadersandcb re-merges the caller's headers argument into the new request, without checking whether...
perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file()
A flaw was found in HTTP::Daemon, a Perl module used for creating HTTP servers. A remote attacker can exploit this vulnerability by providing specially crafted input to the sendfile function, leading to OS command injection. This allows the attacker to execute arbitrary commands on the system wit...
ROS-20260630-73-0038
The vulnerability in the kernel-lt is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...
TencentOS Server 3: nginx:1.24 (TSSA-2026:0558)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0558 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Unverified Password Change
Overview Affected versions of this package are vulnerable to Unverified Password Change in the OAuth2 authentication module when the password is silently rewritten to the username upon OAuth2 re-login. An attacker can gain unauthorized access to user accounts by authenticating with both the...
AlmaLinux 9 : nginx:1.24 (ALSA-2026:28212)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:28212 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the AlmaLinux...
Vulnerability of the ngx_http_v3_module in NGINX HTTP servers; NGINX Open Source platform for application monitoring and management; NGINX Ingress Controller, NGINX Gateway Fabric server controller; NGINX Instance Manager automation platform. These tools allow attackers to bypass security restrictions, execute arbitrary code, or cause service failures.
The vulnerability of the ngxhttpv3module in the NGINX HTTP server, the NGINX Ingress Controller for application monitoring and management, the NGINX Gateway Fabric for web server controllers, and the NGINX Instance Manager for automation platforms are related to the ability to exploit memory afte...