348071 matches found
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: crossplane-function-extra-resources, jobset, crossplane-provider-aws-chime, crossplane-provider-aws-ivs-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, crossplane-provider-aws-sagemaker, cluster-api-provider-vsphere-fips...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: crossplane-function-extra-resources, jobset, crossplane-provider-aws-chime, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, crossplane-provider-aws-sagemaker,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: crossplane-function-extra-resources, jobset, crossplane-provider-aws-chime, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, crossplane-provider-aws-sagemaker,...
CVE-2026-78659 vulnerabilities
Vulnerabilities for packages: crossplane-function-extra-resources, jobset, crossplane-provider-aws-chime, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, crossplane-provider-aws-sagemaker,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: crossplane-function-extra-resources, jobset, crossplane-provider-aws-chime, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, crossplane-provider-aws-sagemaker,...
CVE-2026-39453
The Red Lion Controls N-Tron 700 Series switch is vulnerable to a Reachable Assertion (CWE-617) flaw. Navigating to a specific URL on the device's web server triggers an automatic reboot. An attacker can automate this action using tools like curl to create a persistent Denial of Service (DoS) con...
CVE-2026-39453 Red Lion Controls N-Tron 700 Series Reachable Assertion
Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots...
EUVD-2026-95814
Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots...
CVE-2026-104112
The illumos name service cache daemon (nscd ) is vulnerable to a kernel memory exhaustion flaw due to a missing release of file descriptors . Specifically, the switcher() procedure in usr/src/cmd/nscd/nscd_frontend.c fails to close descriptors passed via a door call that are not used by the reque...
CVE-2026-35031
CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...
CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC
CVE-2025-47812 — Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server whoami root References CVE-2025-47812 W...
CVE-2026-59797
A flaw was found in the modssl module of Apache HTTP Server. The SSLRequire directive does not properly restrict file-related expression functions in .htaccess files. An attacker who can write an .htaccess file in a directory where SSLRequire is permitted could use these functions to read files...
CVE-2026-92414
A flaw was found in jackrabbit-webdav. The WebDAV Web Distributed Authoring and Versioning server attaches a cached authenticated session when request header tokens—such as lock, transaction, or subscription identifiers—match, without verifying user credentials. An unauthenticated remote attacker...
flipper-mcp
flipper-mcp A Rust MCP Model Context Protocol server that runs directly on the Flipper Zero's WiFi Dev Board v1 ESP32-S2, enabling AI agents to control a Flipper Zero over the network. What is this? This project puts an MCP server on the Flipper itself. Any MCP-compatible AI client Claude Desktop...
CVE-2026-15583
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-15583 CVE-2026-15583 Grafana MCP Server 0.17.0 - Grafana Labs I am @abraxasnull. Loopback lab. The client is CVE-2026-15583-Abraxas-Labs.py. Confused deputy. Unauthenticated MCP HTTP takes X-Grafana-URL from...
CVE-2021-41773
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...
RLSA-2026:77018 Important: python3.14 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
httpd bug fix and enhancement update
An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...
prismsec
PrismSec 🔷 Secure, modular MCP server for pentesting tools. Wraps 7 industry-standard security tools nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap into 13 registered MCP tools — ready to use with Claude, Cursor, Copilot, and any MCP-compatible AI agent. Features Feature| Description...
cve-2025-66398
CVE-2025-66398 — Signal K Server RCE PoC 📜 Description CVE-2025-66398 is a Signal K Server issue where an unauthenticated attacker can poison the server’s restore state via /skServer/validateBackup, then hijack config via /skServer/restore to inject a backdoor admin account and optionally achieve...