Lucene search
+L

187815 matches found

RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.5 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module

A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server...

8.8CVSS8.1AI score0.00423EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.5 views

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

8.8CVSS8.3AI score0.00427EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.6 views

postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...

8.8CVSS8.3AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.5 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

8.8CVSS8.1AI score0.00526EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.3 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS7.3AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.5 views

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

8.1CVSS7.5AI score0.00358EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.6 views

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

8.8CVSS8.1AI score0.00363EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:19 a.m.5 views

postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...

8.2CVSS7.7AI score0.00293EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 7:10 a.m.5 views

qt: Qt: Denial of Service via out-of-bounds read in text codec handling

A flaw was found in Qt, a popular software development framework. This vulnerability, an out-of-bounds read, occurs in the QTextCodec::codecForName function when it processes specially crafted input that is not properly terminated. An attacker could exploit this to cause the application to select...

6.3CVSS5.7AI score0.00302EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/23 7:05 a.m.5 views

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

7.5CVSS7.3AI score0.00961EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/23 7:05 a.m.5 views

gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

6.1CVSS6AI score0.00148EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/09/23 6:58 a.m.4 views

CVE-2026-82331

Improper link resolution before file access 'link following' vulnerability in the tar source plugin of Apache BuildStream running on Python = 3.12, BuildStream = 2.3.0 already makes use of the Python tarfile filter functionality, which blocks the symlink escape Users are recommended to upgrade to...

9.8CVSS5.7AI score0.00195EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 6:55 a.m.38 views

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/23 6:44 a.m.19 views

proxychains

README de ProxyChains ver. 4.3.0 ProxyChains es un programa UNIX que engancha las funciones de libc relacionadas con la red en programas enlazados dinámicamente mediante una DLL precargada y redirige las conexiones a través de proxies SOCKS4a/5 o HTTP. ADVERTENCIA: este programa solo funciona con...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 6:29 a.m.11 views

punk.py

punk.py Unix SSH 后渗透 1337 工具 工作原理 punk.py 是一款后渗透工具,旨在帮助从被入侵的 Unix 系统进行网络跳板。 它收集 Unix 系统中的用户名、SSH 密钥和已知主机,然后尝试使用所有找到的组合通过 SSH 进行连接。 punk.py 的编写方式使其可在标准的 Python2 和 Python3 解释器上运行。 截图 示例 标准执行: root@kitploit: $ ./punk.py 跳过密码检查并使用自定义家目录路径: root@kitploit: $ ./punk.py --no-passwd --home /home/ldapusers...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 6:29 a.m.167 views

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 5:58 a.m.7 views

CryKeX

Propiedades: Multiplataforma Minimalismo Simplicidad Interactividad Compatibilidad/Portabilidad Independiente de la aplicación Envoltorio de procesos Inyección de procesos Dependencias: Unix - debería funcionar en cualquier SO basado en Unix BASH - todo el script privilegios root opcional...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/23 5:58 a.m.66 views

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

5.6AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/23 3:49 a.m.3 views

kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject mismatching sum of fieldlen with set key length The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the...

7.8CVSS6AI score0.00196EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/23 3:21 a.m.6 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.8AI score0.00518EPSS
SaveExploits0References8
Rows per page
Query Builder