CVE-2026-16163 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write...

EUVD-2026-94892

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap buffer overflow...

EUVD-2026-94958

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass security restrictions due to improper authorization...

2023-2245

Une vulnérabilité a été trouvée dans hansunCMS 1.4.3. Elle a été déclarée comme critique. Cette vulnérabilité affecte du code inconnu du fichier /ueditor/net/controller.ashx?action=catchimage. La manipulation conduit à un téléchargement sans restriction. L'attaque peut être lancée à distance...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 تم العثور على ثغرة أمنية في SourceCodester Simple Cold Storage Management System 1.0 وتم تصنيفها على أنها إشكالية. تتأثر بهذه المشكلة بعض الوظائف غير المعروفة في الملف /csms/admin/?page=user/list من مكون Create User Handler. يؤدي التلاعب بالوسيط...

CVE-2025-31161

ماسح تجاوز المصادقة CVE-2025-31161 CrushFTP أداة بلغة بايثون لاكتشاف واختبار ثغرة CVE-2025-31161 في خوادم CrushFTP. 📖 الوصف يختبر هذا السكريت ثغرة تجاوز المصادقة CVE-2025-31161 في خوادم CrushFTP التي تسمح للمهاجمين عن بُعد بالمصادقة دون بيانات اعتماد صالحة من خلال التلاعب برأس HTTP Authorization....

CVE-2025-55817

نوع الثغرة Cross Site Scripting XSS المكون المتأثر تحتوي إعدادات الاتصال لـ Nitro GraphQL من Chillicream على 3 مواقع إدخال مختلفة معرضة لـ Cross Site Scripting XSS. المعلمات المعرضة: SDL Schema Endpoint, Subscription Endpoint, SSE Subscription Endpoint نوع الهجوم عن بُعد تأثير الكشف عن المعلومات...

CVE-2024-44542

CVE-2024-44542 Description: il a été découvert que todesk v1.1 contient une vulnérabilité d'injection SQL via le paramètre title sur /todesk.com/news.html. Type de vulnérabilité: Injection SQL Fournisseur du produit: todesk Version du produit concerné: todesk - v1.1 Composant affecté: todesk.com,...

CVE-2025-46203

Description Unifiedtransform v2.0 est vulnérable à un contrôle d'accès incorrect. Tout utilisateur étudiants et enseignants peut accéder et modifier les dossiers des étudiants via les endpoints /students/edit/id. Cette fonctionnalité est destinée exclusivement à un usage administratif...

CVE-2024-24919-POC

CVE-2024-24919-POC اقرأ عنه - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 تسمح هذه الثغرة لمهاجم بعيد غير مصادَق بقراءة محتويات ملف عشوائي موجود على الجهاز المتأثر. قالب Nuclei:...

EUVD-2026-94859

Inefficient algorithmic complexity in the inbound DKIM and ARC signature verification of Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a remote unauthenticated attacker to make the mail services unavailable by sending a message. Building the canonical header and choosing the header...

CVE-2020-15051

CVE-2020-15051 : Artica Proxy avant la version 4.28.030418 Community Edition permet un Cross Site Scripting stocké. Description du produit : Artica Tech propose une solution puissante mais simple d'utilisation, généralement réservée aux grandes entreprises et multinationales. Avec un prix de dépa...

CVE-2026-4894

A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an...

CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN Dans Pulse Secure Pulse Connect Secure PCS 8.2 avant 8.2R12.1, 8.3 avant 8.3R7.1, et 9.0 avant 9.0R3.4, un attaquant distant non authentifié peut envoyer une URI spécialement conçue pour exécuter une vulnérabilité de lecture arbitraire de fichiers. exploit.sh = Exploration...

CVE-2026-87425

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

kernel: svcrdma: Reject inline replies that overflow the pull-up buffer

A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...

EUVD-2026-94796

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

CVE-2026-107459 Openfind｜SecuShare Pro - OS Command Injection

The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-107459

The SecuShare Pro software, developed by Openfind , is susceptible to an OS Command Injection vulnerability (CWE-78 ). This flaw allows unauthenticated remote attackers to inject and execute arbitrary OS commands directly on the server. The vulnerability is classified as CRITICAL with a CVSS 3.1 ...

CVE-2026-107183

A flaw was found in llama.cpp. An unauthenticated remote attacker could exploit this vulnerability by submitting a specially crafted completion request with malformed chat parser parameters. Due to improper memory handling, this request triggers a use-after-free condition that corrupts memory. Th...