143 matches found
CVE-2022-21907
CVE-2022-21907 Description - PoC pour CVE-2022-21907 : vulnérabilité d'exécution de code à distance dans la pile de protocole HTTP. - créé par antx au 2022-01-17. Détail - Vulnérabilité d'exécution de code à distance dans la pile de protocole HTTP. - Similaire à...
CVE-2026-21962
🔥 CVE-2026-21962 — Boîte à outils de détection Oracle HTTP Server Outils de détection sûrs et non exploitants pour identifier les instances Oracle HTTP Server et WebLogic Proxy Plug-in affectées par CVE-2026-21962. 🧠 Présentation de la vulnérabilité CVE : CVE-2026-21962 Gravité : Critique Vecteur...
windows-smb-vulnerability-framework-cve-2025-33073
Framework de Recherche sur les Vulnérabilités du Client SMB Windows Auteur : cyberseallll Créé : 2025 Présentation J'ai développé ce framework de recherche pour analyser et comprendre CVE-2025-33073, une vulnérabilité critique d'élévation de privilèges du client SMB Windows. Cette implémentation...
CVE-2026-50751
CVE-2026-50751 Check Point IKEv1 Scanneur Un scanneur de vulnérabilité multi-threadé pour CVE-2026-50751 , une faille critique de contournement d'authentification IKEv1 affectant les Check Point Quantum Security Gateways. Aperçu Les systèmes Check Point Remote Access VPN avec IKEv1 activé sont...
CVE-2022-21907
CVE-2022-21907 Description POC pour CVE-2022-21907 : Vulnérabilité d'exécution de code à distance dans la pile du protocole HTTP. créé par Malwareman le 2022-09-17. Détail Vulnérabilité d'exécution de code à distance dans la pile du protocole HTTP. Similaire à...
CVE-2021-44228
CVE-2021-44228 Le 9 décembre 2021, le monde a découvert une nouvelle faille de sécurité concernant Log4J. Le score CVSSv3 Common Vulnerability Scoring System de la vulnérabilité a été évalué à 10, la rendant ainsi de niveau critique https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 Son...
CVE-2026-83206
Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...
CVE-2026-78439
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73241
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73047
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69875
CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...
EUVD-2026-73041
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69491
CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...
EUVD-2026-73219
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
PT-2026-87400
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87433
Name of the Vulnerable Software and Affected Versions Windows NDIS affected versions not specified Description A use-after-free issue in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption flaw that occurs when an application...
Linux Distros Unpatched Vulnerability : CVE-2026-82209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...
snphost-0.7.0-3.1 on GA media (moderate)
snphost-0.7.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11654-1 Rating: moderate Cross-References: CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41677 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N...
Fedora 44 : subfinder (2026-6f9cef7bfe)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f9cef7bfe advisory. Update to 2.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...