127248 matches found
Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...
CVE-2026-82064
MongoDB Server contains a denial-of-service vulnerability in its read concern processing logic . An unauthenticated network user can trigger an assertion failure on a specific type of replica set member , causing the server process to terminate. The root cause is that the assertion's assumptions ...
EUVD-2026-72948
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
EUVD-2026-72946
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...
CVE-2026-82059
CVE-2026-82059 affects MongoDB Server , where an internal aggregation expression was incorrectly exposed to any authenticated user instead of being restricted to internal cluster operations. An attacker with read-only privileges can craft a malformed index specification within this expression to ...
CVE-2024-36837
README.md CVE-2024-36837 Disclaimer 智联云采 SRM2.0 runtimeLog/download 接口存在任意文件读取漏洞，未经身份验证攻击者可通过该漏洞读取系统重要文件（如数据库配置文件、系统配置文件）、数据库配置文件等等，导致网站处于极度不安全状态。 fofa语法： body="/wap/first/zsff/iconfont/iconfont.css" || body="CRMEB" POC： GET...
EUVD-2026-64333
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read...
EUVD-2026-64309
NLTK: FileSystemPathPointer.open sandbox check is dead code — arbitrary file read via file:// protocol...
EUVD-2026-64314
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root...
CVE-2022-4140
CVE-2022-4140 - WordPress 插件 Welcart e-Commerce -f --disable-version-check python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd 示例 root@kitploit: └─$ python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd 正在检查目标是否存在漏洞 + 检测到插件版本：2.8.4 + 目标存在漏洞 正在尝试读取任意文件...
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
Windows BitLocker Elevation of Privilege Vulnerability
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...
Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
Windows Win32k Elevation of Privilege Vulnerability
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
Windows Spaceport.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
Windows USB Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally...