641150 matches found
EUVD-2026-68657
A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...
CVE-2018-6389
CVE-2018-6389 ثغرة ووردبريس يمكن لثغرة CVE-2018-6389 إسقاط أي موقع ووردبريس تحت الإصدار 4.9.3 الخلل يؤثر على سكربت load-scripts.php في ووردبريس، والذي يستقبل معاملًا يسمى load حول الإثبات سكربت بسيط بلغة بايثون مع خيوط المعالجة يمكن لأي شخص أن يسقط به معظم مواقع ووردبريس باستخدام جهاز واحد معلوما...
CVE-2016-10708
SSH NEWKEYS Flood PoC CVE-2016-10708 Description Ce script de preuve de concept exploite une vulnérabilité dans les versions d'OpenSSH antérieures à 7.4 CVE-2016-10708 en envoyant des paquets SSHMSGNEWKEYS inattendus, pouvant entraîner un déni de service DoS. Il peut fonctionner selon deux modes ...
Updated c-ares packages fix security vulnerabilities
Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...
MGASA-2026-0343 Updated c-ares packages fix security vulnerabilities
Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...
Important: Red Hat Security Advisory: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs
Summary Vulnerability in the IBM® Runtime Environment Java™ Version 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs: CVE-2026-47027, CVE-2026-47063, CVE-2026-60147 Vulnerability Details CVEID:CVE-2026-47063 DESCRIPTION: Easily exploitable vulnerabilit...
kernel: dm log: fix out-of-bounds write due to region_count overflow
A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...
kernel: netfilter: ctnetlink: ensure safe access to master conntrack
A flaw was found in the netfilter: ctnetlink component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition,...
CVE-2026-26446
A flaw was found in Stomper. An unauthenticated client can trigger a denial of service by closing their TCP connection at specific points while a broker is sending data. This action causes the server process to receive a SIGPIPE signal, leading to its immediate termination and a denial of service...
CVE-2024-47176
CVE-2024-47176 !CAUTION Pour usage éducatif/défensif uniquement, utilisez uniquement là où vous êtes autorisé à le faire, utilisation à vos propres risques ! Comment python3 scanner.py CIDR SCANNER IP Exemple python3 scanner.py 192.168.0.0/16 192.168.5.100 Modules requis tqdm Installation via...
CVE-2026-80701
A flaw was found in the Linux kernel's drm/vmwgfx component. A local attacker with DRM master privileges could exploit this by providing oversized cursor dimensions through the DRMIOCTLMODECURSOR2 interface. This improper input validation can lead to a kernel crash, resulting in a Denial of Servi...
CVE-2026-80660
A flaw was found in the Linux kernel's hwmon occ component. This vulnerability occurs when occactivefalse or occshutdown attempt to unregister sysfs devices while holding the occ-lock. During this process, sysfs callbacks can re-enter the OCC update path and try to acquire the occ-lock again,...
CVE-2026-80627
A flaw was found in the Linux kernel, specifically within the MIPS architecture's memory management component. The maarreswalk function performs an out-of-bounds write when processing memory ranges. This occurs because the function fails to check if its internal array is full before writing new...
CVE-2026-80623
A flaw was found in the Coresight Embedded Trace Extension ETE component of the Linux kernel. This vulnerability arises because the system register states for Embedded Trace Macrocells ETMs and ETE are not consistently preserved when the CPU powers down. A local attacker could potentially trigger...
CVE-2026-34344
CVE-2026-34344 Informations Cette vulnérabilité a été découverte à l'origine par @angelboy. Je l'ai reproduite de manière indépendante à des fins éducatives et d'étude de cas. Détail de la mise à jour Microsoft : CVE-2026-34344 Le PoC démontre un crash via la vulnérabilité Type Confusion...
Important: Red Hat Security Advisory: iperf3 security update
An update for iperf3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion
A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...
browser-crash-tool
Outil de Crash de Navigateur - Kali Aperçu Cet outil exploite une vulnérabilité dans iOS WebKit CVE-2020-27950 en utilisant le module auxiliaire webkitbackdropfilterblur de Metasploit. Mais il semble fonctionner sur tous les navigateurs après quelques tests. Il fait planter le navigateur cible en...