24878 matches found
Automated-Exploit-Chain
Case Study: Foothold-to-Root Exploit Chain & Remediation Pr...
PT-2026-79141
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...
MINI-38F2-3JX9-QXG9
Bulletin has no description...
CVE-2026-76361: Server-Side Request Forgery (SSRF)
In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../checkconnectivity endpoint to make Splunk SOAR initiate outbound network connections to arbitrary destinations and determine whether internal hosts and ports are reachable. The...
WordPress SVG Support plugin < 2.5.17 - Author+ Stored XSS via .svgz Sanitization Bypass vulnerability
Author+ Stored XSS via .svgz Sanitization Bypass vulnerability discovered by Shivamani Vastrala in WordPress Plugin SVG Support versions 2.5.17...
Achievement Unlocked: Let'S Get Hacked! an Empirical Study of Cybercrime in the Video Gaming Ecosystem
The ubiquity of the video game industry and its large user base have transformed video games into complex social and economic ecosystems. Unfortunately, this growing popularity also attracts cybercriminals who deliberately exploit game-specific mechanisms to target players. Despite this growing...
CVE-2026-40145
BeyondTrust Endpoint Privilege Management (Windows deployment) support utility has a tamper-protection bypass where, under certain conditions, protections on the utility process are not enforced as intended. CVSS 7.1 HIGH requires local access with high privileges. No affected versions, root caus...
vim: Vim: Arbitrary code execution via crafted step-definition patterns
A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...
hulak v0.3.32
Git-native API client with encrypted secrets. REST · GraphQL · OAuth Quick Start • GraphQL Explorer • Project Layout • Documentation Run one request, a whole directory, or stay interactive root@kitploit: hulak run ./requests/ Hulak runs request files directly from your project. It supports...
fail2ban v1.1.1
root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...
CVE-2026-74355
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
CVE-2026-13360: Improper Neutralization of Input During Web Page Generation
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regionArray' parameter in all versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. This makes it possible for...
Denial Of Service
Spring Data Commons is vulnerable to Denial Of Service. The vulnerability is due to specially crafted HTTP requests causing excessive memory allocation when Spring Data Web Support is enabled with a controller method using @ProjectedPayload...
GO-2026-5736 vulnerabilities
Vulnerabilities for packages: kcp-fips, rancher-support-bundle-kit, kcp, multicluster-controlplane, juicefs, milvus, dapr, dapr-fips, multicluster-controlplane-fips, etcd...
.NET 8.0 security, bug fix, and enhancement update
8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235468...
PT-2026-71805
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an untrusted search path...
CVE-2026-68758
A low-privileged authenticated user may access restricted support information under specific conditions...
EUVD-2026-57255
A low-privileged authenticated user may access restricted support information under specific conditions...
