Hadoop-Yarn-ResourceManager-RCE

Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...

CVE-2020-5752

CVE-2020-5752: Druva inSync Local Privilege Escalation A C-based exploit for the Druva inSync Windows Client v6.6.3 and below. The application exposes an RPC service on port 6064 that is vulnerable to command injection via path traversal. This allows a local user to execute arbitrary commands as ...

CVE-2026-58663

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-58663

An authentication bypass vulnerability exists in the Thrift RPC service of Apache IoTDB . The flaw specifically involves the pipeTransfer() interface. This issue affects versions from 2.0.0 up to (but not including) 2.0.11 . Exploitation of this vulnerability could lead to unauthorized access or ...

EUVD-2026-107162

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-58663 Apache IoTDB: Auth Bypass in pipeTransfer() interface

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-58663

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

PT-2026-120523

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

Apache IoTDB security vulnerabilities

A security vulnerability exists in Apache IoTDB versions 2.0.0 through 2.0.11; it stems from an authentication bypass flaw in the Thrift RPC service...

Rocky Linux 8 [CIQ] Security Update: evolution-mapi / evolution-mapi-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_7139)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20237139 advisory. samba: out-of-bounds read in winbind AUTHCRAP CVE-2022-2127 samba: infinite loop in mdssvc RPC service for spotlight CVE-2023-34966 samba: type confusion i...

AlmaLinux 9.2 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1738266573)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1738266573 advisory. - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets se...

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2024:1724260726)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1724260726 advisory. - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the...

Malicious code in echo-rpc-service (npm)

The package echo-rpc-service was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-16895

CVE-2026-16895 is a fail-open logic vulnerability in the Metasploit Framework 's JSON-RPC web service interface. When an exception occurs during the database health check (db.check) and the environment variable MSF_WS_JSON_RPC_API_TOKEN is not explicitly set, the internal flag msf.auth_initialize...

CVE-2026-16895 Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

metasploit -- multiple vulnerabilities

Rapid7 published security advisories for issues fixed in releases 6.5.2 through 6.5.7. The credential endpoint of the msf-ws REST API is reachable without authentication, authentication in the JSON-RPC service is skipped when the database health check fails, a post module writes files outside the...

EUVD-2026-63751

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

CVE-2026-19446

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

CVE-2026-19446

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable: a remote unauthenticated attacker can crash a reachable RPC service via a crafted UDP packet, causing complete system unavailability requiring an LPAR restart (CVSS 7.5 HIGH). No patch version or exploit details are provided in the documents; e...

CVE-2026-19446 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...