319731 matches found
ExploitScript-CVE-2023-46604
ExploitScript-CVE-2023-46604 Отказ от ответственности Этот репозиторий содержит код доказательства концепции proof-of-concept для CVE-2023-466064 и предназначен строго для образовательных целей. Авторы и участники не поддерживают никакую незаконную деятельность. Информация представлена здесь для...
CVE-2022-26134-Exploit-Detection
Confluence RCE CVE-2022-26134 익스플로잇 탐지 사전 요구 사항 1. ClamAV 이 저장소를 복제하거나 Confluence 서버에 Yara 규칙을 다운로드하세요 이 취약점을 최초로 공개한 volexity/threat-intel이 제공한 Yara 규칙을 사용합니다. Git 클론 git clone https://github.com/th3b3ginn3r/CVE-2022-26134-Exploit-Detection.git 원본 파일 다운로드 CVE-2022-26134.yar:...
Malicious code in css-jptvix-polyfill (npm)
Source: amazon-inspector cea61788c370593a2720461d06b74942933d38d30b449851a05541b5b7f189aa The package ships thunderboltRegistry.js, a Proxy-based shim that exports names mimicking internal Wix thunderbolt modules thunderboltRegistry, siteAssetsRegistry, editorRegistry, corvidRegistry,...
disable-RegisterSpoolerRemoteRpcEndPoint
disable-RegisterSpoolerRemoteRpcEndPoint Windows Print Spooler 원격 코드 실행 취약점CVE-2021-34527에 대한 해결 방법입니다. 참조: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 업데이트 2021-07-08: Microsoft가 패치를 발표했습니다 Microsoft는 이미 이 취약점에 대한 패치를 발표했으므로 시스템을 최신 상태로 유지하면 충분합니다. 하지만 원한다면 이 기능을 계속 끌 수...
DEBIAN-CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...
AZL-106679 CVE-2026-106547 affecting package hdf5 1.14.6-4
A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...
DEBIAN-CVE-2026-106547
A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...
CVE-2026-79810
Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...
CVE-2026-76751
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent...
CVE-2026-76750
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...
CVE-2026-102163
On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...
CVE-2026-102167
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network...
CVE-2026-102165
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...
CVE-2026-106547 HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata
A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...
EUVD-2026-93991
A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...
CVE-2026-106547
A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...
CVE-2026-43598
A vulnerability exists in the AMD ROCm Communication Collectives Library (RCCL) due to improper input validation . This flaw could allow a compromised peer rank or a network-adjacent attacker to dereference an attacker-controlled pointer, potentially leading to remote code execution (RCE) on Inst...
EUVD-2026-93987
Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...