ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

CVE-2026-122120

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution...

CVE-2026-122120

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution...

EUVD-2026-117014

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution...

CVE-2026-122120

In Yealink Plug-in Softwares versions prior to 2.35.219.0 , an unauthorized file write vulnerability exists under specific scenarios. This flaw is classified as CWE-434 (Unrestricted Upload of File with Dangerous Type) and can be exploited by attackers to achieve remote code execution . The vulne...

CVE-2026-110022

The PFI plugin framework contains a signed plug-in validation bypass (CVE-2026-110022). The vulnerability exists because the deployment routine processes archive entries that are not covered by signature verification . An unauthenticated local attacker can include an unsigned DLL in a signed plug...

CVE-2026-110022 Signed plug-in validation bypass

The PFI plugin framework deploys executable assemblies DLLs from a signed plugin package into the local plugin repository and loads them via reflection, but the deployment routine processes archive entries that were never covered by the signature verification. An unauthenticated local attacker ca...

PT-2026-137090

Name of the Vulnerable Software and Affected Versions Yealink Plug-in Softwares versions prior to 2.35.219.0 Description An unauthorized file write issue exists in the plug-in component. Remote attackers can write files over the network without authentication, which may lead to remote code...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

Release Information for Veeam Plug-In for Google Cloud 8 Patches

Release Information 8.0.1.256 2026-10-27 Plug-In build: 13.8.1.186 What's New Security and Performance Third-party libraries and packages were updated to address their discovered vulnerabilities. Overall stability and product security have been improved. Deployment Information To install updates,...

Release Information for Veeam Plug-In for AWS 11 Patches

Release Information 11.1.0.10 2026-10-27 Plug-In build: 13.11.1.18 What's New Security and Performance Third-party libraries and packages were updated to address their discovered vulnerabilities. Overall stability and product security have been improved. Resolved Issues In rare cases, editing a...

Release Information for Veeam Plug-In for Microsoft Azure 9 Patches

Release Information 9.0.0.444 2026-10-27 Plug-In build: 13.9.2.449 What's New Security and Performance Third-party libraries and packages were updated to address their discovered vulnerabilities. Overall stability and product security have been improved. Resolved Issues In rare cases, installing ...

CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported...

SUSE CVE-2026-119528

A flaw was found in GIMP. The PSD plug-in's image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — Critical Security Vulnerability 😈 🚨 Severity CVSS Score: 10.0 / 10 Critical Published: January 20, 2026 Risk Level: 🔥 Maximum — immediate action recommended 🧠 What is it? A critical vulnerability affecting: Oracle HTTP Server Oracle WebLogic Server Proxy Plug-in for Apache & II...

CVE-2024-25291

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Java GUI version of the Oracle WebLogic Server Proxy Plug-In RCE Remote Code Execution vulnerability exploitation tool. Project Structure java-version/ ├── pom.xml Maven project configuration file ├── README.md Project documentation ├── run.bat Windows startup...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server Detection Toolkit Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962. 🧠 Vulnerability Overview CVE: CVE-2026-21962 Severity: Critical Attack Vector: Network Authentication...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0,...