Lucene search
+L

2330 matches found

Debian CVE
Debian CVE
•added 2026/07/20 4:29 p.m.•39 views

CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices ar...

9.8CVSS8.7AI score0.01107EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/20 3:11 p.m.•96 views

Exploit for Out-of-bounds Write in Watchguard Fireware

CVE-2025-9242 PoC This package preserves a version-pinned Wat...

9.8CVSS9AI score0.91804EPSS
SaveExploits5
Cvelist
Cvelist
•added 2026/07/20 12:12 p.m.•121 views

CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

5.3CVSS0.00479EPSS
SaveExploits0References78
CVE
CVE
•added 2026/07/20 12:12 p.m.•148 views

CVE-2026-15588

CVE-2026-15588 affects GLib’s GDBus component. The gdbusauth mechanism fails to enforce length limits on data lines read from a client, enabling an unauthenticated attacker to trigger DoS and resource exhaustion by sending extremely long data streams. This can cause excessive memory and CPU consu...

5.3CVSS5.9AI score0.00479EPSS
SaveExploits0References78
EUVD
EUVD
•added 2026/07/20 12:04 p.m.•25 views

EUVD-2026-45935

FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...

9.8CVSS8.5AI score0.00913EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/07/20 12:04 p.m.•26 views

CVE-2026-64620

FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...

9.8CVSS8.4AI score0.00913EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/07/20 12:04 p.m.•17 views

CVE-2026-64620 FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common

FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...

9.8CVSS8.4AI score0.00913EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/07/20 12:04 p.m.•17 views

CVE-2026-64620

FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...

9.8CVSS8.5AI score0.00913EPSS
SaveExploits1References4
GithubExploit
GithubExploit
•added 2026/07/20 4:58 a.m.•93 views

Exploit for CVE-2026-63030

Lab — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Ambiente D...

9.8CVSS9.1AI score0.10649EPSS
SaveExploits94
Tenable Nessus
Tenable Nessus
•added 2026/07/20 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-64620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard...

9.8CVSS8.3AI score0.00913EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2026/07/19 2:42 p.m.•98 views

Exploit for CVE-2026-63030

wp2shell \CVE-2026-63030/CVE-2026-60137 Pre Authentication...

9.8CVSS8AI score0.15701EPSS
SaveExploits112
osv_oesa
osv_oesa
•added 2026/07/19 11:11 a.m.•28 views

OESA-2026-3015 libssh2 security update

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...

7.5CVSS7AI score0.00918EPSS
SaveExploits1References3
osv_oesa
osv_oesa
•added 2026/07/19 11:11 a.m.•26 views

OESA-2026-3016 libssh2 security update

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...

7.5CVSS7AI score0.00918EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2026/07/19 6:23 a.m.•94 views

Exploit for CVE-2026-60137

wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...

9.8CVSS9.2AI score0.10649EPSS
SaveExploits94
GithubExploit
GithubExploit
•added 2026/07/19 6:12 a.m.•93 views

Exploit for CVE-2026-63030

wp2shell Pre-Authentication Remote Code Execution in WordPres...

9.8CVSS9.2AI score0.10649EPSS
SaveExploits94
GithubExploit
GithubExploit
•added 2026/07/18 5:07 p.m.•62 views

Exploit for CVE-2026-63030

CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 Read t...

9.8CVSS8.9AI score0.10649EPSS
SaveExploits94
GithubExploit
GithubExploit
•added 2026/07/18 2:06 p.m.•104 views

Exploit for CVE-2026-63030

wp2shell CVE-2026-63030 / CVE-2026-60137 PoC for an unaut...

9.8CVSS8.9AI score0.10649EPSS
SaveExploits94
GithubExploit
GithubExploit
•added 2026/07/18 3:56 a.m.•102 views

wp2shell

wp2shell Pre-authentication RCE exploit for WordPress Core RE...

9.8CVSS9.2AI score0.10649EPSS
SaveExploits91
GithubExploit
GithubExploit
•added 2026/07/18 3:16 a.m.•92 views

Exploit for CVE-2026-60137

wp2shell-lab Educational PoC and lab for CVE-2026-63030 + C...

9.1CVSS8.8AI score0.10649EPSS
SaveExploits94
GithubExploit
GithubExploit
•added 2026/07/18 12:44 a.m.•138 views

Exploit for CVE-2026-63030

WordPress REST API Batch Route Confusion + SQL Injection → RCE...

9.1CVSS9.1AI score0.10649EPSS
SaveExploits94
Rows per page
Query Builder