127562 matches found
Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...
CVE-2026-82064
MongoDB Server contains a denial-of-service vulnerability in its read concern processing logic . An unauthenticated network user can trigger an assertion failure on a specific type of replica set member , causing the server process to terminate. The root cause is that the assertion's assumptions ...
EUVD-2026-72948
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
CVE-2026-82059
CVE-2026-82059 affects MongoDB Server , where an internal aggregation expression was incorrectly exposed to any authenticated user instead of being restricted to internal cluster operations. An attacker with read-only privileges can craft a malformed index specification within this expression to ...
EUVD-2026-72946
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...
CVE-2024-36837
README.md CVE-2024-36837 Disclaimer 智联云采 SRM2.0 runtimeLog/download 接口存在任意文件读取漏洞，未经身份验证攻击者可通过该漏洞读取系统重要文件（如数据库配置文件、系统配置文件）、数据库配置文件等等，导致网站处于极度不安全状态。 fofa语法： body="/wap/first/zsff/iconfont/iconfont.css" || body="CRMEB" POC： GET...
EUVD-2026-64333
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read...
EUVD-2026-64309
NLTK: FileSystemPathPointer.open sandbox check is dead code — arbitrary file read via file:// protocol...
EUVD-2026-64314
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root...
CVE-2022-4140
CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
Windows Spaceport.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
Windows Key Distribution Center Denial of Service Vulnerability
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
Windows USB Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Remote Code Execution Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...
Microsoft Trace Data Helper Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...