CVE-2025-59088: Server-Side Request Forgery (SSRF)

If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request f...

RHEL 10 : python-kdcproxy (RHSA-2025:21142)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:21142 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

EUVD-2018-10983

Malware in sbrugna...

EUVD-2002-0817

Malware in sbrugna...

EUVD-2014-8023

Malware in sbrugna...

EUVD-2018-3392

Malware in sbrugna...

EUVD-2024-0452

Malicious code in bioql PyPI...

CVE-2020-35857

An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption...

Linux Distros Unpatched Vulnerability : CVE-2023-52618

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block/rnbd-srv: Check for unlikely string overflow Since devsearchpath can technically be as large as PATHMAX, there was a risk of truncation when copying it a...

CVE-2020-15152

ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable. In ftp-srv before versions 2.19.6, 3.1.2, and 4.3.4 are vulnerable to Server-Side Request Forgery. The PORT command allows arbitrary IPs which can be used to cause the server to make a...

The vulnerability of the httpProcDataSrv() function in TP-Link TL-WDR5620 router software allows a hacker to execute arbitrary code.

The vulnerability of the httpProcDataSrv function in TP-Link TL-WDR5620 router software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-50062

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establishment, RTRS client initiates and completes connum of connections. After establishing all its connections, the information is exchanged betwee...

CVE-2024-50062 RDMA/rtrs-srv: Avoid null pointer deref during path establishment

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establishment, RTRS client initiates and completes connum of connections. After establishing all its connections, the information is exchanged betwee...

PT-2024-33897

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue concerns a null pointer dereference during RDMA/rtrs-srv path establishment. In this process, the RTRS client initiates and completes a number of connections, and after all...

CVE-2024-50062: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establishment, RTRS client initiates and completes connum of connections. After establishing all its connections, the information is exchanged betwee...

PT-2024-23980

Name of the Vulnerable Software and Affected Versions PVR SRV Bridge RGX affected versions not specified Description The issue is related to improper input validation in the PVRSRVBridgeRGXKickTA3D2 function of server rgxta3d bridge.c. This could lead to arbitrary code execution, resulting in loc...

CVE-2024-45171: Unrestricted Upload of File with Dangerous Type

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangerous files, for instance PHP code, to the C-MOR system. By analyzing the C-MOR web interface, it was found out that the upload functionality for backup file...

PT-2024-31455

Name of the Vulnerable Software and Affected Versions za-internet C-MOR Video Surveillance version 5.2401 Description An issue was discovered due to improper user input validation, allowing the upload of dangerous files, such as PHP code, to the system. The upload functionality for backup files...

DNS Record Scanner and Enumerator

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DNS Record Scanner and Enumerator', 'Description' = %q This module can be used to gather information about a domain from a given DNS server by...

CVE-2024-32910: Use of Uninitialized Resource

In handlemsgshmmapreq of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...