EUVD-2026-75903

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2026-78123

strongSwan (IKE/IPsec suite) versions 5.0.2 through 6.0.7 contain an expired pointer dereference (undefined memory access) in the openssl plugin during PKCS#7 container parsing , which can result in a crash and denial of service. The CVSS 3.1 score is 5.9 (Medium) with high attack complexity and ...

CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

EUVD-2026-75898

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

PT-2026-90508

libks provides foundational support for signalwire C products. Prior to version 2.0.11, clean uri in libks's HTTP request parser fails to reject URIs whose path has more segments than its internal canonicalization buffer can hold. The canonicalization step silently passes such URIs through with...

gstreamer1-plugins-base security update

1.26.7-2.2 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253746...

PT-2026-89672

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

Linux Distros Unpatched Vulnerability : CVE-2026-57223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - windows: unquoted LocalSystem service ImagePath CVE-2026-57223 Note that Nessus relies on the presence of the...

Oracle Linux 8 : ELSA-2026-66451-0: / glib2 (ELSA-2026-664510)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664510 advisory. 2.56.4-178 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing Tenable has extracted the preceding description block directly from the Oracle...

PT-2026-89791

multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound the amount of memory used while accumulating the headers of a single multipart part. An unauthenticated attacker can send a single reques...

Oracle Linux 10 : ELSA-2026-66460-0: / gstreamer1-plugins-base (ELSA-2026-664600)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664600 advisory. 1.26.7-2.2 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253746 Tenable has extracted the preceding description block directly fr...

Linux Distros Unpatched Vulnerability : CVE-2026-45761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a...

CVE-2025-7766

CVE-2025-7766 PoC Exploit 用于利用CVE-2025-7766中XML外部实体漏洞的PoC。演示文件读取（/etc/passwd）和带外HTTP回调。 作者 : Byte Reaper CVE : CVE-2025-7766 漏洞类型 : 通过XML外部实体（XXE）实现远程代码执行 利用CVE-2025-7766中XXE的PoC。演示： 从目标读取/etc/passwd。 向你的服务器触发带外HTTP请求。 依赖 gcc libcurl argparse library 构建 root@kitploit: gcc -o exploit exploit.c...

CVE-2023-41080

有漏洞的：http://localhost:8081//secret.html;@example.com 重定向到任意网站（本例中为 https://example.com）。 已修补的：http://localhost:8082//secret.html;@example.com 参考：https://github.com/advisories/GHSA-q3mw-pvr8-9ggc...

netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses 103, followed by a 200 with a GET body, then another 200 for a HEAD request when the client pipelines GET the...

js-yaml: js-yaml: Denial of Service via crafted YAML documents

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial o...