Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: grpc-health-probe-fips, kyverno-policy-reporter-plugins-kyverno-fips, aws-load-balancer-controller-fips, kubernetes-csi-external-snapshotter, crossplane-provider-aws-transfer-fips, aws-flb-firehose, sqlexporter, kubebuilder, crossplane-provider-aws-mediapackage-fips,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: frp, k3s, teleport, kyverno-policy-reporter-ui-fips, dkron, k8sgateway-fips, rke2-runtime, ipfs-cluster-fips, caddy, syncthing, kyverno-policy-reporter-ui, eks-distro, eks-distro-fips, spegel, kargo, k8sgateway, ipfs-cluster, traefik-fips, q, spegel-fips, dkron-fips,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: flux-operator, kubevela-fips, knative-eventing-fips, kyverno-fips, coder-fips, crossplane-provider-azure-portal, crossplane-provider-azure-web, crossplane-aws-provider, external-dns, mapotf-fips, kyverno-policy-reporter-plugins-kyverno-fips, kine, skaffold, nuclei,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubevela-fips, knative-eventing-fips, kyverno-fips, coder-fips, external-dns, skaffold, kine, trivy, etcd-fips, argocd-image-updater-fips, seaweedfs-rocksdb-fips, cloud-provider-aws, backup-restore-operator, calico-fips, fscrypt, opentofu-fips, frankenphp-8.2,...

SUSE: Security Advisory (SUSE-SU-2026:1320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-c718defeb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kbld, litefs, lazydocker, cloud-provider-aws, dapr, flux, nri-postgresql, flux-source-controller, timestamp-authority, gitlab-pages, terraform-docs, azure-workload-identity-webhook, yace, portieris, bento, zot, rqlite, cerbos, opentofu, rancher-helm,...

openSUSE Security Advisory (SUSE-SU-2026:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2026-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-fe96f3532b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

PT-2026-29029

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

IngEstate Server v11.14.0 is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities within the Edit feature of the Software Package List page. The root cause is the improper neutralization of input, specifically via the About application , What's news , or Release note parameter...