159535 matches found
Bank Locker Management System - Cross-Site Scripting
A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...
Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload
Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...
EUVD-2026-95329
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
EUVD-2026-95328
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
EUVD-2026-95338
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...
EUVD-2026-95336
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...
CVE-2021-24086
CVE-2021-24086 This is a proof of concept for CVE-2021-24086 "Windows TCP/IP Denial of Service Vulnerability ", a NULL dereference in tcpip.sys patched by Microsoft in February 2021. According to this tweet, the vulnerability has been found by @piazzt. It is triggerable remotely by sending...
CVE-2026-78796
The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router (v1.3.241114.024540 and before) contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is located in the www extbackslash cgi-bin\upgrade file. No specific remediation or explo...
EUVD-2026-95859
An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information...
PT-2026-108867
Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description An issue exists in the STSTokenValidator where the result of the SAML assertion signature check is stored in an object shared...
CVE-2026-78795
The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router is vulnerable in versions v1.3.241114.024540 and before . A remote attacker can exploit this issue to obtain sensitive information . The vulnerability is classified as CWE-200 (Exposure of Sensitive Information to an Unauth...
The vulnerability of the Golang X Text package for text processing, related to unvalidated array indexing, allows a attacker to cause a service failure.
The vulnerability of the Golang X Text package for text processing is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the net/http component in the Golang programming language, which allows a hacker to trigger a service failure
The vulnerability of the net/http component in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...
HPESBST05160 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3962, Multiple Vulnerabilities
Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Escalation of Privilege, Buffer Overflow; Remote: Access Restriction Bypass, Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service DoS, Unauthorized Access, Unauthorized Data Injection, Buff...
CVE-2026-105405
A flaw was found in ImageMagick. A remote attacker could exploit this vulnerability by supplying a specially crafted Magick Vector Graphics MVG image for processing. When parsed by the MVG decoder, the malformed input triggers an invalid memory free operation, crashing the application and causing...
CVE-2026-107778
A flaw was found in krb5. An authenticated remote attacker can cause a Denial of Service DoS by sending specially crafted forwarded credentials containing mismatched credential entries. This improper handling triggers a null pointer dereference, causing the service to crash and become unavailable...
CVE-2025-70886
CVE-2025-70886 إثبات المفهوم PoC لاستغلال CVE-2025-70886، وهي ثغرة رفض الخدمة المستمرة في Halo CMS الإصدار v2.22.4 والإصدارات الأقدم التي تتيح للمهاجمين عن بعد تعطيل واجهة التعليقات الإدارية عن طريق إرسال حمولات غير صالحة. معلومات أساسية | Product Vendor: 凌霞软件 | Vendor Website:...
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
OpenSSH-CVE-2024-6387-Fix
CVE-2024-6387 سكريبت التخفيف من ثغرة OpenSSH نظرة عامة تم تصميم هذا السكريبت بلغة Bash للمساعدة في التخفيف من ثغرة CVE-2024-6387 في OpenSSH. تؤثر الثغرة على إصدارات معينة من OpenSSH ويمكن أن تسمح للمهاجمين غير الموثوقين عن بُعد بتنفيذ تعليمات برمجية عشوائية على نظامك. يمنحك هذا السكريبت خيار...