CVE-2026-91809

Foxit PDF Editor/Reader is susceptible to a use-after-free vulnerability during the handling of malformed PDF form fields. The root cause is improper validation during field-name traversal , which can lead the application to access a released object. This vulnerability can result in an applicatio...

EUVD-2026-85154

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the application to access a released object, resulting in an application crash...

postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...

CVE-2025-14221

説明 1. CVE-2025-14221 2. 発見者: Fatma Trabelsi 3. 製品ベンダー: SourceCodester 4. 影響を受ける製品: Online Banking System 1.0 POC アプリケーションのユーザープロファイル更新機能に、格納型クロスサイトスクリプティング（XSS）の脆弱性が存在します。アプリケーションは、名前フィールドに入力されたユーザー提供データをデータベースに保存し、複数のページで表示する前に適切にサニタイズできていません。...

EUVD-2026-85023

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level account to disclose the display name and email address of every registered user, including administrators...

DEBIAN-CVE-2026-91776

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

CVE-2026-91776

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

CVE-2025-22131-PoC

CVE-2025-22131-PoC CVE-2025-22131 の PoC PhpSpreadsheet は純粋な PHP で書かれたライブラリであり、Excel や LibreOffice Calc などのさまざまなスプレッドシートファイル形式を読み書きするための一連のクラスを提供します。 phpspreadsheet のバージョン =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets = $this-spreadsheet-getAllSheets; else $sheets =...

CVE-2026-91776 jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

CVE-2026-91776

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

CVE-2026-91776 jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

EUVD-2026-85002

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

CVE-2023-38831

CVE-2023-38831 これは、WinRAR 6.23より前のすべてのバージョンに影響を与えるCVE-2023-38831エクスプロイトを作成する、使いやすいツールです。 CVE-2023-38831エクスプロイトの詳細 RARLAB WinRAR...

CVE-2026-67224: Improper Limitation of a Pathname to a Restricted Directory

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

Linux Distros Unpatched Vulnerability : CVE-2026-91776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based...

com.eypcnnapps.quickreboot

このリポジトリには README がありません。...

CVE-2026-57576

The plone.app.dexterity and plone.app.contenttypes components of the Plone content management system are vulnerable to a denial of service (DoS) attack. An authenticated user can trigger this by creating content with excessively long titles , descriptions, or uploaded-file names, which causes the...

Exploit for CVE-2026-87915

CVE-2026-87915 — Popup Maker VDP-XSS-PROOF - valuesnam...

cve-2024-10914

POC - CVE-2024–10914 - D-Link NAS name 参数中的命令注入漏洞 概述 在 D-Link DNS-320、DNS-320LW、DNS-325 和 DNS-340L（截至 20241028）中发现了一个漏洞。该漏洞被评定为严重。受此漏洞影响的函数是文件 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd 中的 cgiuseradd 函数。对参数 name 的操作导致了操作系统命令注入。攻击可远程发起。攻击复杂度相当高，利用似乎很困难。该利用代码已向公众披露，可能被使用。 受影响设备 DNS-320 Version 1.00...

CVE-2025-51401

Exploit Title: LiveHelperChat =4.61 - オペレーターのチャット名フィールドによる保存型クロスサイトスクリプティング（XSS）（チャットオーナー転送時にトリガー） Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software...