CVE-2026-18743

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

UBUNTU-CVE-2026-18743

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

EUVD-2026-68924

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied typed struct field names. resolvetypedstructfield/2 in...

CVE-2026-67395

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

CVE-2026-67395

A path traversal vulnerability in Sage Employee Self Service (part of Sage HRMS) arises from improper validation of file path parameters in the custom logo functionality. An unauthenticated remote attacker can leverage directory traversal sequences and their encoded variants to bypass directory r...

CVE-2023-40459

はじめに このリポジトリには、CVE-2023-40459 脆弱性の PoC が含まれています。この脆弱性は、Sierra Wireless 製品である ALEOS 4.16 およびそれ以前のバージョンの ACEManager ファイルに影響を与えます。この攻撃は、初期アクセス権がなくても、対象デバイスへのアクセスを妨害 DoS する可能性があります。 使用するには、次のコマンドを実行してください: root@kitploit: $ python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Exploit Title: 차량 서비스 관리 시스템 - '다중' 파일 업로드로 인한 저장형 크로스 사이트 스크립팅 Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 중간 참고 자료: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 エクスプロイトタイトル: Vehicle Service Management System - 複数のファイルアップロードによるコード実行 エクスプロイト作成者: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH 参考文献: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076...

MicroBurst

MicroBurst: Azure を攻撃するための PowerShell ツールキット MicroBurst には、Azure サービスの探索、脆弱な構成の監査、資格情報のダンプなどの攻撃後アクションをサポートする関数とスクリプトが含まれています。これは、Azure が使用されているペネトレーションテスト中に使用することを目的としています。 著者、貢献者、ライセンス 著者: Karl Fosaaen @kfosaaen, NetSPI 貢献者: Scott Sutherland @nullbind Thomas Elling @thomaselling Jake Karnes...

CVE-2026-19820

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

CVE-2026-62994

A flaw was found in CoreDNS, a DNS server. A remote attacker can trigger a denial of service by sending a specially crafted AXFR request to a CoreDNS zone. This occurs when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint...

CVE-2026-18743 Popt-devel: popt-static: short realloc in poptconfigfiletostring

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

CVE-2026-18743

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

CVE-2026-18743

popt (specifically the poptConfigFileToString function in popt-static/popt-devel) contains a short realloc bug that can cause heap metadata corruption when a host loads specially crafted configuration content. Successful exploitation results in a low-impact denial of service due to process unavai...

CVE-2026-18743 Popt-devel: popt-static: short realloc in poptconfigfiletostring

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

EUVD-2026-68918

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

Security Bulletin: IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service [CVE-2026-16892]

Summary IBM i is vulnerable to allowing a remote authenticated attacker to bypass security restrictions CVE-2026-16892 in Network Authentication Service NAS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16892 DESCRIPTION: IBM i could allow a remote...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16826, CVE-2026-17499, CVE-2026-17273, CVE-2026-17259, CVE-2026-18076, CVE-2026-17274, CVE-2026-17270, CVE-2026-18073 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16826...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207]

Summary IBM i is vulnerable to denial of service due to missing authentication and a buffer overflow CVE-2026-17057, CVE-2026-17207 in Network File System NFS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17057 DESCRIPTION: IBM i could allow a remote...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...