44812 matches found
CVE-2026-96234
A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization...
USN-8942-1: .NET vulnerabilities
Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues. .NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11...
USN-8942-1 dotnet8, dotnet10, dotnet11 vulnerabilities
Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues. .NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11...
CVE-2019-0708-test
CVE-2019-0708-test CVE-2019-0708 C Vulnerability Verification Programming Language: C Programming Software: Visual Studio 2012 Programming Environment: .Net Framework 4.5 A software written in C to verify the CVE-2019-0708 vulnerability Calls 0708detector.exe released by 360's 360Vulcan Team...
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
CVE-2025-53770
CVE-2025-53770 – Microsoft SharePoint Server 2019 Unauthenticated RCE via Deserialization Exploit Author: Agampreet Singh Tool: RedRoot https://github.com/Agampreet-Singh/RedRoot Date: August 7, 2025 Tested On: SharePoint Server 2019 v16.0.10383.20020 on Windows Server 2019 CVE-ID: CVE-2025-53770...
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
Exploit for CVE-2026-99999
CVE-2026-99999 — Technical Analysis & Attack Chain Study Li...
ROOT-APP-GOBINARY-CVE-2025-22872 CVE-2025-22872 in golang.org/x/net - Patched by Root
Root has patched CVE-2025-22872 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
OHTS
OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.43 security and extras update
Red Hat OpenShift Container Platform release 4.20.43 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...
ROOT-APP-GOBINARY-CVE-2024-45338 CVE-2024-45338 in golang.org/x/net - Patched by Root
Root has patched CVE-2024-45338 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
CVE-2026-91563: Oracle Database: Critical Patch Update - October 2026
Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMSAW privilege with network access via Oracle Net to compromise Oracle...
CVE-2026-73964: Oracle Database: Critical Patch Update - October 2026
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful...
Oracle E-Business Suite: CVE-2026-83367: Critical Patch Update
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Shippin...
PT-2026-119306
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attack...
Linux Distros Unpatched Vulnerability : CVE-2026-98804
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pagepool: fix use-after-free in pagepoolrecycleringbulk With CONFIGPAGEPOOLSTATS=y, pagepoolrecycleringbulk updates the recycle stats after dropping the...
Linux Distros Unpatched Vulnerability : CVE-2026-96234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-96234 Note that Nessus relies on the presence o...
PT-2026-119305
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...
Linux Distros Unpatched Vulnerability : CVE-2026-96958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-96958 Note that Nessus relies on the presenc...