Lucene search
+L

488 matches found

Kitploit
Kitploit
•added 2026/09/27 7:05 p.m.•13 views

FakeNetBIOS

Nota para el autor: si desea que esto se extraiga de Github, lo entiendo y lo haré sin objeciones. Ya que ha proporcionado el código fuente, pensé que @mubix sería una buena manera de incorporar mejoras al paquete | | | Herramientas FakeNetBIOS | | | | Simulación de hosts NetBIOS tipo Windows | |...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/09/18 8:17 p.m.•7 views

CVE-2026-11711

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

6.5CVSS0.00376EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 7:08 p.m.•13 views

EUVD-2026-83288

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

6.5CVSS5.9AI score0.00376EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 7:08 p.m.•45 views

CVE-2026-11711 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

6.5CVSS0.00376EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 7:08 p.m.•11 views

CVE-2026-11711 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

6.5CVSS5.9AI score0.00376EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 7:08 p.m.•25 views

CVE-2026-11711

IBM WebSphere Application Server versions 9.0 and 8.5 are affected by a deserialization vulnerability in the Name Service component , rated CVSS 6.5 (Medium) with an attack vector of adjacent network, no required privileges, and high availability impact. The vulnerability is fixed in 9.0.5.29 and...

6.5CVSS5.9AI score0.00376EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-11711: Deserialization of Untrusted Data

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

6.5CVSS5.9AI score0.00376EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux – Vulnerability in glibc

NSCD: Stack-based buffer overflow in netgroup cache If the fixed-size cache of the Name Service Cache Daemon nscd is exhausted due to client requests, then a subsequent client request for netgroup data may lead to a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cach...

8.1CVSS7.2AI score0.0131EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux – Vulnerability in glibc

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the nssgethostbyname2r and nssgetcanonnamer hooks without...

5.9CVSS6.6AI score0.01606EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•13 views

Astra Linux – Vulnerability in glibc

Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library’s DNS backend can lead to a situation where a zero-valued network is queried during operations in the GNU C Library versions 2.0 to 2.42. This could result in leaking stack contents to the configured...

7.5CVSS7.2AI score0.00627EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•17 views

Astra Linux – Vulnerability in glibc

The Name Service Cache Daemon’s nscd netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. This flaw was introduced in glibc 2.15, when the cache was added to nscd. This vulnerability only exists in the nscd binary...

7.4CVSS6.3AI score0.00403EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/08 5:14 p.m.•8 views

EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00414EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-68895: Numeric Truncation Error

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00414EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2026/08/07 8:15 a.m.•13 views

Double-free in the iSNS attribute decoder in open-iscsi

...

8.7CVSS5.2AI score0.00426EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/08/07 12:00 a.m.•10 views

The vulnerability of the sss_nss_protocol_parse_addr() function in the NSS responder of the access control service for remote directories and the SSHD authentication mechanism allows a attacker to cause a service failure.

The vulnerability of the sssnssprotocolparseaddr function in the NSS responder component of the access control service for remote directories and the SSHD authentication mechanism is related to the issue of the operation being executed outside of the buffer. Exploiting this vulnerability could...

5.5CVSS5.3AI score0.0013EPSS
SaveExploits0References3Affected Software3
SUSE CVE
SUSE CVE
•added 2026/08/06 11:54 p.m.•14 views

SUSE CVE-2026-68742

A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...

6.1CVSS5.4AI score0.0013EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/08/06 11:54 p.m.•17 views

SUSE CVE-2026-68744

A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...

4.4CVSS5.4AI score0.00133EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:04 p.m.•29 views

Malicious code in bigops-activity-headers-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276084c74a91d1e2369091a4da29068c4c3c46b3e1cc782a2fcbbf1d4261e9ec On require'bigops-activity-headers-interceptor', index.js loads helpers.js which auto-invokes start. The module fetches a platform-specific binary fr...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/04 3:49 p.m.•18 views

Malicious code in @nebula.js/theme (npm)

npm/@nebula.js/theme is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

6AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/04 6:16 a.m.•18 views

CVE-2026-68744

A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...

3.3CVSS5.2AI score0.00133EPSS
SaveExploits0References3
Rows per page
Query Builder