CVE-2026-12260 SQL injection in the NetBoard CRM demo platform

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

CVE-2026-12260

The NetBoard CRM demo platform is vulnerable to a SQL injection flaw in the ‘user-name’ POST parameter of the ‘/module/auth/recovery.php’ endpoint. The vulnerability allows for blind attacks using Boolean, error, time-based, and UNION techniques. Successful exploitation enables an attacker to ext...

EUVD-2026-94803

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

CLEANSTART-2026-SJ77898 Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints

CVE-2026-27138 affects multiple packages. Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. See references for individual vulnerability details...

PT-2026-107869

Name of the Vulnerable Software and Affected Versions NetBoard CRM demo platform affected versions not specified Description An issue exists in the '/module/auth/recovery.php' endpoint where the user-name POST parameter is susceptible to SQL injection. This allows for blind attacks using Boolean,...

EUVD-2026-95113

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...

PT-2026-108051

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...

CVE-2026-76279

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to write events to internal indexes outside the index access configured for the role. The vulnerability is...

CVE-2026-76273

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

CVE-2024-43363

CVE-2024-43363 Script de explotación de CVE-2024-43363 Este script de Python está diseñado para probar si una instancia de Cacti es vulnerable a CVE-2024-43363, una vulnerabilidad de ejecución remota de código RCE causada por envenenamiento de registros log poisoning. Cómo funciona la...

HookTools

HookTools Descripción general HookTools es una pequeña herramienta diseñada para ayudar en el análisis de malware extremadamente evasivo. Se puede inyectar en una muestra de malware para determinar su reacción ante cambios específicos. Características HookTools incluye una serie de característica...

CVE-2024-48652

CVE-2024-48652 在 camaleon-cms v.2.7.5 中存在跨站脚本漏洞，允许远程攻击者通过内容组名称字段执行任意代码。 复现步骤： 1. 打开 URL：http://127.0.0.1/admin/dashboard 2. 使用管理员凭据登录。 3. 导航到“设置”部分。 4. 点击“内容组”。 5. 选择一个内容组的“编辑”选项。 6. 在“名称”字段中输入以下 XSS 载荷： " 7. 保存更改。 8. 刷新页面或导航到其他部分。 9. XSS 载荷将触发，弹出一个包含“1”的警告框。 漏洞类型：跨站脚本 XSS 产品供应商：Camaleon-Cms...

CVE-2025-14221

描述 1. CVE-2025-14221 2. 发现者：Fatma Trabelsi 3. 产品供应商：SourceCodester 4. 受影响产品：Online Banking System 1.0 POC 在应用程序的用户资料更新功能中存在一个存储型跨站脚本（XSS）漏洞。应用程序未能正确清理用户在“名字”字段中提供的输入，就将其存储到数据库中并在多个页面上渲染。...

libexpat: denial of service via crafted XML input

A flaw was found in libexpat. When processing a specially crafted XML input containing a specific pattern of attributes, the parsing time increases quadratically due to checks for attribute name collisions. This consumes excessive CPU resources and eventually results in a denial of service...

CVE-2026-94114

Symbolic name not mapping to correct object vulnerability in Apache Co...

Linux Distros Unpatched Vulnerability : CVE-2026-94114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker- controlled classes under their self-declared names without...

DEBIAN-CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

EUVD-2026-93970

Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue...

CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...