357810 matches found
KB5126868: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2026)
The remote Windows host is missing security update 5126868. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)
The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
KB5126835: Windows Server 2012 Security Update (October 2026)
The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
KB5126657: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2026)
The remote Windows host is missing security update 5126657. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
KB5126646: Windows Server 2025 Security Update (October 2026)
The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...
Security Updates for Microsoft Office Online Server (October 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
MiracleLinux 8 : httpd:2.4 bug fix and enhancement update (AXBA:2026-2033:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-2033:01 advisory. - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff time...
CVE-2025-5548
🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...
cve-2021-41773-nse
cve-2021-41773-nse By George Labrin @creadpag N|Solid Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. First Tab: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: sudo nmap -Pn --script=cve-2021-41773.nse X.X.X.X -p ...
CVE-2026-66908
CVE-2026-66908 — camel-platform-http-main JWT iss/aud not validated Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-main embedded HTTP server builds its JWT authenticator from a keystore alone when neither jwtIssuer nor jwtAudience is configured, so inbound...
React-Server-Components-RCE
React Server Components Remote RCE Exploitation Tool 📖 Tool Introduction React Server Components Remote RCE Exploitation Tool is a security testing tool specifically designed for remote code execution vulnerabilities in React Server Components and Next.js frameworks. It provides a graphical user...
CVE-2022-36804
CVE-2022-36804 The Bitbucket Server and Bitbucket Data Center components have a command injection vulnerability, according to information recently discovered by the Sangfor security team. An attacker can submit malicious HTTP requests to execute arbitrary code and eventually get access to the...
CVE-2024-23733
CVE-2024-23733 Software AG webMethods API Integration Server 10.15.0 Incorrect Access Control Description The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...
CVE-2023-3519
CVE-2023-3519 identify NetScaler Citrix ADC servers vulnerable to CVE-2023-3519 Ported to python from https://github.com/mr-r3b00t/CVE-2023-3519 Not tested. use at your own risk...
CVE-2026-81858 IBM i is Affected By A Denial of Service Vulnerability in Host Servers
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...
CVE-2026-81858
IBM i versions 7.3, 7.4, 7.5, and 7.6 (affected product feature 5770-SS1 ) are vulnerable to a denial of service and unauthorized information disclosure . The root cause is an out-of-bounds read (CWE-125) within the File Server component, which can be triggered by a remote authenticated attacker....
CVE-2026-93886 IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUI
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...
CVE-2026-93886
IBM i versions 7.3, 7.4, 7.5, and 7.6 (Product 5770-SS1) are vulnerable to an Improper Neutralization of Input During Web Page Generation (CWE-79) in the HTTP Server Administration Graphical User Interface (GUI) . A remote authenticated attacker could exploit this flaw due to improper validation ...
CVE-2026-96119
IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to an Improper Control of Code Generation (CWE-94) vulnerability within the HTTP Server Administration web application . Due to improper data sanitization , a remote authenticated attacker could potentially obtain sensitive information or execu...