177336 matches found
EUVD-2026-100860
The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...
CVE-2026-89288
The Fast Courier WordPress plugin (versions 5.0.0-5.2.3 ) is vulnerable to SQL injection because it fails to sanitize and escape a value used in a SQL query on an unauthenticated REST route . Specifically, the vulnerability is triggered via the 'wp_order_id' parameter. An unauthenticated attacker...
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
DsArk64
DsArk64 DsArk64.sys ships with 360 Total Security. WHQL-signed by Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Requested MITRE. Primitives Process kill ring 0 IOCTL 0x80863008, input: 4-byte raw PID Driver calls ZwOpenProcessALLACCESS + ZwTerminateProcess from kernel No encryption on...
CVE-2019-8997
CVE-2019-8997 An XML External Entity Injection XXE vulnerability in the Management System console of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering...
CVE-2024-2928
CVE-2024-2928 Arbitrary file read exploit for CVE-2024-2928 in mlflow specifically in version 2.9.2, which was fixed in version 2.11.3 The exploit code tested on Linux Source: https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298 Usage python3 CVE-2024-2928.py -t 127.0.0.1 -p 5000 After...
CVE-2025-64720-PoC
CVE-2025-64720: libpng Buffer Overflow in Palette Premultiplication Status : Patched Severity : High CVE ID : CVE-2025-64720 Discovery Date : 2025-11-XX Public Disclosure : 2025-11-21 Overview Summary An out-of-bounds read vulnerability exists in libpng's pngimagereadcomposite function when...
openclaw-hardening-check
This script only reads. It fixes nothing and does not guarantee that you are safe. Green output means only that the checks listed below passed—and nothing more. OpenClaw hardening check openclaw-hardening-check.mjs is a small, dependency-free, offline review of an OpenClaw installation. It reads...
MGASA-2026-0505 Updated freeciv package fixes security vulnerabilities
Freeciv before 3.2.6 Heap Buffer Overflow via worklistload. CVE-2026-90556 Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame. CVE-2026-90557...
Updated mingw-gdk-pixbuf package fixes security vulnerabilities
out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...
MGASA-2026-0503 Updated mingw-gdk-pixbuf package fixes security vulnerabilities
out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...
CVE-2025-56499
CVE-2025-56499 Arbitrary File Read via Missing Path Validation in Local Rule Provider Upstream Fix: https://github.com/MetaCubeX/mihomo/pull/2177 Affected Versions: mihomo = v1.19.11 Summary When parsing rule-providers configuration, the type = "file" branch fails to validate the supplied path. A...
CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read
CVE-2025-2539 - File Away WordPress Plugin Arbitrary File Read 📋 Executive Summary CVE ID: CVE-2025-2539 Plugin: File Away Versions = 3.9.9.0.1 Vulnerability Type: Authenticated Arbitrary File Read CVSS Score: 8.5 High Exploit Availability: Public PoC Available Impact: Unauthorized file disclosur...
CVE_2023_20198_Detector
CVE202320198Detector This script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198. The script takes as input a csv file with all the device IP addresses that you want to check. By default the script looks for a file named "devices.csv"; you can name the file something differe...
EUVD-2026-100752
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...
EUVD-2026-100633
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-100635
Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...
Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache HTTP Server and libexpat
Summary IBM HTTP Server used by IBM WebSphere Application Server is affected by multiple vulnerabilities due to libexpat and the included Apache HTTP Server. Vulnerability Details CVEID:CVE-2026-66046 DESCRIPTION: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic...
ROS-20261014-73-0079
The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this vulnerability may allow an attacker to access protected information or cause service...