83754 matches found
CVE-2026-89177
WeenyGenius is a computer lab management system by Howyar Technologies . The vulnerability stems from reliance on ZMTP Null mode , an unauthenticated zero-message-transport-protocol handshake that provides no encryption or integrity. An unauthenticated attacker on the same (adjacent) network can ...
CVE-2026-89177 Howyar｜WeenyGenius - Use of Insecure Protocol
WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to...
Moderate: Red Hat Security Advisory: gstreamer1-plugins-base security update
An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header
A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...
PHP_8.1.x_Exploit
🚀 PHP CVE 自动驾驶仪 自动检测和利用关键 PHP 漏洞 CVE-2024-4577 绕过, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh 是一个单文件、零配置 的安全评估工具，能够自动发现易受攻击的 PHP 端点，并利用影响 PHP 8.1.34 之前版本 （2024 年 12 月发布）的四个高危 CVE 。它无需手工构建载荷 ——只需提供一个 URL，脚本会自动完成从爬取到远程代码执行的全部工作。完全自动驾驶模式 ——无需用户提示即可自动检测和利用。 特性 完全自主的自动驾驶模式 – 给定一...
DEBIAN-CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
AZL-100028 CVE-2026-78130 affecting package strongswan 5.9.14-10
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
AZL-100043 CVE-2026-78126 affecting package strongswan 5.9.14-10
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...
DEBIAN-CVE-2026-78126
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...
CVE-2026-78126
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...
CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78130
strongSwan (IKE/IPsec suite), versions 4.2.0 through 6.0.7 , contains a NULL pointer dereference in the x509 plugin during the verification of X.509 attribute certificates. An attacker can trigger this remotely over the network without authentication, leading to a denial of service (high availabi...
CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
EUVD-2026-75903
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78126
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...
