Lucene search
+L

357810 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•7 views

KB5126868: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2026)

The remote Windows host is missing security update 5126868. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

9.8CVSS8.4AI score0.02137EPSS
SaveExploits0References768
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•9 views

KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)

The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

9.8CVSS8.5AI score0.02137EPSS
SaveExploits0References918
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•8 views

KB5126835: Windows Server 2012 Security Update (October 2026)

The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

9.8CVSS8.5AI score0.02137EPSS
SaveExploits0References613
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•7 views

KB5126657: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2026)

The remote Windows host is missing security update 5126657. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

9.8CVSS8.1AI score0.02137EPSS
SaveExploits0References899
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•10 views

KB5126646: Windows Server 2025 Security Update (October 2026)

The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

9.8CVSS8.1AI score0.02137EPSS
SaveExploits0References1042
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•10 views

Security Updates for Microsoft Office Online Server (October 2026)

The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS8.6AI score0.00835EPSS
SaveExploits0References44
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•7 views

MiracleLinux 8 : httpd:2.4 bug fix and enhancement update (AXBA:2026-2033:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-2033:01 advisory. - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff time...

7.5CVSS7.4AI score0.0045EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/12 11:48 p.m.•17 views

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

9.8CVSS8AI score0.14985EPSS
SaveExploits15References2
Kitploit
Kitploit
•added 2026/10/12 11:42 p.m.•13 views

cve-2021-41773-nse

cve-2021-41773-nse By George Labrin @creadpag N|Solid Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. First Tab: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: sudo nmap -Pn --script=cve-2021-41773.nse X.X.X.X -p ...

9.8CVSS8.8AI score0.99992EPSS
SaveExploits174References1
Kitploit
Kitploit
•added 2026/10/12 11:42 p.m.•16 views

CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud not validated Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-main embedded HTTP server builds its JWT authenticator from a keystore alone when neither jwtIssuer nor jwtAudience is configured, so inbound...

7.5CVSS7.5AI score0.0061EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/12 11:39 p.m.•15 views

React-Server-Components-RCE

React Server Components Remote RCE Exploitation Tool 📖 Tool Introduction React Server Components Remote RCE Exploitation Tool is a security testing tool specifically designed for remote code execution vulnerabilities in React Server Components and Next.js frameworks. It provides a graphical user...

6.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/12 11:32 p.m.•15 views

CVE-2022-36804

CVE-2022-36804 The Bitbucket Server and Bitbucket Data Center components have a command injection vulnerability, according to information recently discovered by the Sangfor security team. An attacker can submit malicious HTTP requests to execute arbitrary code and eventually get access to the...

8.8CVSS9AI score0.99174EPSS
SaveExploits25
Kitploit
Kitploit
•added 2026/10/12 11:31 p.m.•22 views

CVE-2024-23733

CVE-2024-23733 Software AG webMethods API Integration Server 10.15.0 Incorrect Access Control Description The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and...

7.5CVSS6.1AI score0.02419EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/12 11:27 p.m.•19 views

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

7.5CVSS7.5AI score0.04169EPSS
SaveExploits10References1
Kitploit
Kitploit
•added 2026/10/12 11:26 p.m.•18 views

CVE-2023-3519

CVE-2023-3519 identify NetScaler Citrix ADC servers vulnerable to CVE-2023-3519 Ported to python from https://github.com/mr-r3b00t/CVE-2023-3519 Not tested. use at your own risk...

9.8CVSS9AI score0.99749EPSS
SaveExploits18References1
Cvelist
Cvelist
•added 2026/10/12 11:22 p.m.•35 views

CVE-2026-81858 IBM i is Affected By A Denial of Service Vulnerability in Host Servers

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

5.4CVSS0.00482EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/12 11:22 p.m.•33 views

CVE-2026-81858

IBM i versions 7.3, 7.4, 7.5, and 7.6 (affected product feature 5770-SS1 ) are vulnerable to a denial of service and unauthorized information disclosure . The root cause is an out-of-bounds read (CWE-125) within the File Server component, which can be triggered by a remote authenticated attacker....

8.1CVSS5.8AI score0.00482EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/10/12 11:22 p.m.•30 views

CVE-2026-93886 IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUI

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...

8.3CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/12 11:22 p.m.•34 views

CVE-2026-93886

IBM i versions 7.3, 7.4, 7.5, and 7.6 (Product 5770-SS1) are vulnerable to an Improper Neutralization of Input During Web Page Generation (CWE-79) in the HTTP Server Administration Graphical User Interface (GUI) . A remote authenticated attacker could exploit this flaw due to improper validation ...

8.3CVSS6.6AI score0.00186EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/12 11:22 p.m.•32 views

CVE-2026-96119

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to an Improper Control of Code Generation (CWE-94) vulnerability within the HTTP Server Administration web application . Due to improper data sanitization , a remote authenticated attacker could potentially obtain sensitive information or execu...

9.9CVSS6.7AI score0.00519EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder