PHP Login System 2.0.1 - Cross-Site Scripting

msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ 안전 검증기 Apache ActiveMQ CVE-2023-46604 를 위한 단일 파일, 비파괴적 검증기입니다. 자체 HTTP 콜백 서버를 시작하고, 대상별 Spring XML을 메모리에서 생성하며, 제작된 OpenWire 패킷을 전송하고, 고유 토큰으로 콜백을 연관시킨 다음 CSV/JSON 증거를 기록합니다. 이 프로젝트는 공인된 침투 테스트 및 자산 검증을 위해 설계되었습니다. 리버스 셸, 무제한 명령 실행, CIDR 확장, 지속성 또는 페이로드 스테이징을 의도적으로 구현하지...

hibernate__hibernate-validator_CVE-2019-10219_6_0_18_Final_fixed

Hibernate Validator Версия: 6.0.18.Final — 25-10-2019 Что это такое? Эталонная реализация JSR-380 — Bean Validation 2.0. Bean Validation определяет модель метаданных и API для валидации JavaBean, а также методов. По умолчанию источником метаданных являются аннотации, с возможностью переопределени...

arp-validator

arp-validator Инструмент безопасности для обнаружения атак с подменой ARP Features Использует более быстрый подход к обнаружению атак с подменой ARP по сравнению с пассивными методами Обнаруживает не только наличие подмены ARP, но и корректное отображение IP-MAC когда хосты LAN используют...

CVE-2017-16995

Описание уязвимости Ubuntu — это операционная система GNU/Linux с открытым исходным кодом, ориентированная на настольные приложения, основанная на Debian GNU/Linux. Недавно белыми хакерами была обнаружена локальная уязвимость повышения привилегий в последней версии Ubuntu Ubuntu 16.04,...

hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final

Hibernate Validator Версия: 6.0.17.Final - 13-06-2019 Что это? Это эталонная реализация JSR-380 - Bean Validation 2.0. Bean Validation определяет модель метаданных и API для JavaBean, а также для проверки методов. Источником метаданных по умолчанию являются аннотации, с возможностью переопределят...

CVE-2026-93985

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to...

CVE-2026-93985

OpenPanel js-runtime through commit bad75bdd is affected by a sandbox escape in its JavaScript webhook template validator . The validator fails to block computed member access to constructor chains, allowing attackers with project write access to craft webhook templates using computed property no...

CVE-2026-93985 OpenPanel js-runtime JavaScript Template Sandbox Escape RCE

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to...

CVE-2026-93985: Improper Control of Generation of Code

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to...

Amazon Linux 2 : unbound (ALASUNBOUND-1.17-2026-010)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2026-010 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial...

Amazon Linux 2 : unbound (ALAS-2026-3928)

The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3928 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service...

CVE-2026-0915-json-Patch.-V2.0

Uploading 1000000837.png… CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON 검증기 보안 패치 CVE-2026-0915를 위한 엔터프라이즈급 솔루션 - 엄격한 스키마 검증을 통해 안전하지 않은 JSON 파싱으로부터 보호합니다. 🚨 보안 공지 이 패치는 CVE-2026-0915 를 해결합니다 - JSON 파싱 구현에서 Injection 공격으로 이어질 수 있는 심각한 취약점입니다. ✨ 기능...

cosmicsting-validator

Cosmicsting POC с bash-скриптом для проверки всех наших хостинг-сайтов на наличие патча. Этот репозиторий предоставлен, чтобы владельцы магазинов / хостеры могли убедиться, что патч применен на магазинах. В check.bash добавьте домены в список SITES...

CVE-2026-81642

A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution. Mitigatio...

FORT-validator

FORT Validator RPKI リライングパーティおよび RTR サーバー。 ドキュメント ホーム インストール 使用方法 引数 Docker イメージ docker/ ディレクトリを参照してください。...

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wednesday. An attacker who controls a malicious zone and queries a vulnerable resolver can trigger it, enabling remote code execution. Unbound...

unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...

CVE-2026-81642

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...

UBUNTU-CVE-2026-81642

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...