1202650 matches found
openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10)
A flaw was found in the Networking component of OpenJDK. This vulnerability allows an unauthenticated remote attacker to cause unauthorized data modification by sending crafted input to exposed Application Programming Interfaces APIs, such as through web services. Successful exploitation enables ...
openjdk: Enhance HTTP server (Oracle CPU 2026-10)
A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...
openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)
A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...
openjdk: Enhance C2 comparisons (Oracle CPU 2026-10)
A flaw was found in the OpenJDK Compiler component. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted data to exposed application programming interfaces APIs, such as through a web service. Successful exploitation could allow the attacker to read, update, or...
openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)
A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by sending crafted requests across network protocols to exposed application programming interfaces APIs within the Security component. A successful attack can result in unauthorized modification,...
openjdk: Enhance SASL Authentication (Oracle CPU 2026-10)
A flaw was found in OpenJDK. An unauthenticated remote attacker can exploit this vulnerability over a network by supplying crafted input to Application Programming Interfaces APIs within the Security component. Successful exploitation can result in unauthorized read and modification access to a...
openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to networking application programming interfaces APIs. A successful attack could allow unauthorized modification or deletion of accessible data, or resul...
openjdk: Enhance XML Processing (Oracle CPU 2026-10)
A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...
openjdk: Enhance Certificate Name Checks (Oracle CPU 2026-10)
A flaw was found in OpenJDK. An unauthenticated remote attacker can exploit this issue across multiple network protocols by submitting crafted requests to application programming interfaces APIs within the Security component. Successful exploitation allows an attacker to modify or delete accessib...
openjdk: Enhance Template Handling (Oracle CPU 2026-10)
A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...
openjdk: Improve ciphertext handling (Oracle CPU 2026-10)
A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces APIs or by executing untrusted code within sandboxed environments. A successful...
openjdk: Enhance Image Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...
openjdk: Enhance jstatd (Oracle CPU 2026-10)
A flaw was found in the Serviceability component of OpenJDK. An unauthenticated remote attacker can exploit this issue across the network by supplying crafted data to exposed application programming interfaces APIs or by running untrusted code within a sandboxed Java environment. Successful...
openjdk: Enhance HTTP client caching (Oracle CPU 2026-10)
A flaw was found in the OpenJDK Networking component. This vulnerability allows an unauthenticated remote attacker with network access to cause an information disclosure. By supplying crafted input to networking Application Programming Interfaces APIs, such as through an exposed web service, an...
openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...
Advisory ROSA-SA-2026-3322
Software: Google Brotli OS: ROSA-CHROME Affected versions: = brotli 1.0.10 Affected versions: brotli 1.0.10 CVE-ID: CVE-2026-111497 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A remote unauthorized attacker can send a specially crafted stream compressed using Brotli. CVE-STATUS: Vulnerability has been...
Advisory ROSA-SA-2026-3321
Software: Google Brotli OS: ROSA-CHROME Affected versions: = brotli 1.1.1 Not affected versions: brotli 1.1.1 CVE-ID: CVE-2026-111497 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A remote unauthorized attacker can send a specially crafted stream compressed using Brotli. CVE-STATUS: Vulnerability has be...
CVE-2016-10033
PoC for CVE-2016-10033 RCE against WordPress 4.6 usage: ./CVE-2016-10033.py example: ./CVE-2016-10033.py http://site.com/ 1.2.3.4:4444 admin Python port +alterations of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html Required: Requests pip install requests I...
