607 matches found
CVE-2025-67737
CVE-2025-67737 affects AzuraCast versions 0.23.1, where an API endpoint intended for internal use by sftpgo was exposed in the public HTTP API (at /api/internal/sftp-event). A user with valid SFTP credentials and knowledge of the station’s internal filesystem can craft a tailored HTTP request to ...
CVE-2025-55184
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafe...
📄 Craft CMS 5.0 Logic Flaw
A flaw in the Craft CMS image transform endpoint allows an unauthenticated attacker to trigger backend processing without prior authentication. While the original Metasploit module targeted remote code execution, this proof of concept does not execute code, does not write files, and does not inje...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 A modified and a...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - React Server Components RCE Scanner !Severi...
CVE-2025-66509 LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chain
LaraDashboard is an all-In-one solution to start a Laravel Application. In 2.3.0 and earlier, the password reset flow trusts the Host header, allowing attackers to redirect the administrator’s reset token to an attacker-controlled server. This can be combined with the module installation process ...
Fortinet FortiAnalyzer Pre-authentication DoS attack in OpenSSH - CVE-2025-26466 (FG-IR-25-122)
The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-122 advisory. - A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a...
Exploit for Double Free in Openbsd Openssh
CVE-2023-25136 Vulnerability Demonstration This project provi...
CVE-2025-42940
SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network. This may result in memory corruption followed by an application crash, hence leading to a high impact on availability. There is no impact on confidentiality...
Adobe Experience Manager Forms - Insecure Deserialization
Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user...
EUVD-2021-19574
Malware in sbrugna...
EUVD-2025-12271
Malicious code in bioql PyPI...
EUVD-2022-40544
Malicious code in bioql PyPI...
EUVD-2021-8626
Malicious code in bioql PyPI...
EUVD-2025-12270
Malicious code in bioql PyPI...
EUVD-2021-8627
Malicious code in bioql PyPI...
EUVD-2023-12212
Malicious code in bioql PyPI...
EUVD-2025-12217
Malicious code in bioql PyPI...