CVE-2026-33258: Allocation of Resources Without Limits or Throttling

By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC3 caches...

CVE-2026-6408: Insufficiently Protected Credentials

Tanium addressed an information disclosure vulnerability in Tanium Server...

CVE-2026-33260: Allocation of Resources Without Limits or Throttling

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default...

CVE-2026-33594: Allocation of Resources Without Limits or Throttling

A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buffer that will not be released until the end of the connection...

CVE-2026-33596: Integer Overflow or Wraparound

A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed to a TCP-only or DNS over TLS backend...

CVE-2026-33598: Out-of-bounds Read

A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress or getAddressListByDomain on a packet cache...

CVE-2026-33609: Improper Neutralization of Special Elements used in an LDAP Query

Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees...

CVE-2026-33602: Heap-based Buffer Overflow

A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service...

CVE-2026-6392: Exposure of Sensitive Information to an Unauthorized Actor

Tanium addressed an information disclosure vulnerability in Threat Response...

CVE-2026-33262: NULL Pointer Dereference

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default...

Exploit for Cross-site Scripting in Bdtask Multi_Store_Inventory_Management_System

CVE-2024-2997 Scanner !Versionhttps://img.shields.io/badge...

vulnerability-scanner

vulnerability-scanne...

CVE-2026-33812: Undefined Security Weakness

Parsing a malicious font file can cause excessive memory allocation...

CVE-2026-33813: Undefined Security Weakness

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

CVE-2026-6776: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

CVE-2026-31368: Improper Privilege Management

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

ExploitIQ

⚡ ExploitIQ Autonomous AI-Powered Penetration Testing Assis...

Nuclei 3.8.0

Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...

CVE-2026-41282: Improper Control of Generation of Code

ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets not the default configuration...

CVE-2026-5966: Relative Path Traversal

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...