vulnknox

VulnKnoX VulnKnox es una herramienta de línea de comandos potente escrita en Go que se integra con la API de KNOXSS. Automatiza el proceso de probar URLs en busca de vulnerabilidades de Cross-Site Scripting XSS utilizando las capacidades avanzadas del motor de KNOXSS. Características Soporta...

cve-2018-15473

CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...

CVE-2026-12370

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

CVE-2026-94057

A flaw was found in Exim. A remote attacker could exploit a vulnerability known as SMTP smuggling by sending crafted data after a rejection during the DATA processing phase. This manipulation could lead to a mismatch between the intended sent message and the actual received message, potentially...

CVE-2026-84451

A flaw was found in libheif. A remote attacker could exploit an integer overflow vulnerability when processing a crafted uncompressed image tile. This overflow leads to an out-of-bounds read, which can cause tile-processing applications to crash, resulting in a denial of service. Mitigation...

CVE-2024-38063

CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A vulnerability with a 9.8 CVSS score in the most easily reachable part of the...

XBadManners

XBadManners Descripción del CVE CVE-2018-16323 es una fuga de memoria en el procesamiento de imágenes XBM. Después de que una imagen XBM se convierte a otro tipo de imagen, se pueden extraer los bytes de memoria filtrados de los datos de la imagen. Descubierto por d4d. Herramienta Una herramienta...

CVE-2025-20260

CVE-2025-20260 - ClamAV PDF Scanning Buffer Overflow First Public PoC First public proof-of-concept for CVE-2025-20260 CVSS 3.1 base score 9.8, Critical, a buffer-overflow vulnerability in the PDF scanning path of ClamAV. This repository contains a generator for the malicious PDF that triggers th...

puma_header_normalization-CVE-2024-45614

Puma Header normalization CVE-2024-45614 Verification advisory: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4 fix commit: https://github.com/puma/puma/commit/cac3fd18cf29ed43719ff5d52d9cfec215f0a043 Results Execution results of request.rb duplicate...

CVE-2026-91810

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader involving the handling of malformed PDF image masks . The root cause is linked to inconsistent image metadata , which may cause incorrect alpha-channel processing during rendering. This flaw can lead to an out-of-boun...

EUVD-2026-85164

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause incorrect alpha-channel processing during rendering, resulting in an out-of-bounds read and application crash...

CVE-2026-91818

A use-after-free vulnerability exists in Foxit PDF Editor/Reader 's JavaScript handling of PDF annotations. The root cause is reentrant page-event processing during annotation enumeration, which may release the associated page object; subsequent access to this object results in an application cra...

EUVD-2026-85156

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

ROS-20260923-73-0077

The vulnerability of the fqpiechange function in the net/sched/schfqpie.c module of the network/sched subsystem of the Linux operating system is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0065

The vulnerability of the nfsfiledirectread function in the fs/nfs/direct.c module, which is part of the NFS client support in Linux kernel, is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service failures...

asf__nifi_CVE-2023-34468_1-21-00

Apache NiFi is an easy to use, powerful, and reliable system to process and distribute data. Table of Contents Features Requirements Getting Started MiNiFi subproject Registry subproject Getting Help...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

CVE-2026-93989

A flaw was found in vLLM. A remote attacker can exploit a vulnerability by providing malformed input related to 'bad words' token processing. This can lead to out-of-bounds memory access, corrupting the internal data logits memory used for generating responses for other concurrent requests. As a...

PIL-CVE-2017-8291

Python PIL Remote Command Execution Vulnerability GhostButt The PIL Pillow module for processing images in Python is affected by the GhostButt vulnerability CVE-2017-8291 because it calls GhostScript internally, resulting in a remote command execution vulnerability. Vulnerability Summary PIL...