477741 matches found
DEBIAN-CVE-2026-65637
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...
CVE-2023-0297
CVE-2023-0297 Nicht authentifizierte Remote-Codeausführung in PyLoad 0.5.0b3.dev31 HAFTUNGSAUSSCHLUSS: Dieses Skript dient der Überprüfung der Systemsicherheit. Verwenden Sie dieses Skript nur auf Ihren eigenen Systemen oder auf Systemen, für die Sie eine schriftliche Erlaubnis zum Ausnutzen...
CVE-2025-57460
CVE-2025-57460 Beschr.: Eine Datei-Upload-Schwachstelle in machsol machpanel 8.0.32 ermöglicht es einem Angreifer eine Webshell zu erlangen. POC: Navigieren Sie zu https://controlpaneldomain/Client/SubmitTicket.aspx und laden Sie eine ASPx-Webshell hoch, reichen Sie dann das Ticket ein, öffnen Si...
EUVD-2026-45030
Whistle vulnerable to path traversal...
EUVD-2026-65699
Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, including service accounts, to read,...
EUVD-2026-36714
AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching...
EUVD-2026-37013
gRPC Erlang package's path bindings are overridable by query string and request body...
CVE-2023-43494
CVE-2023-43494 Lettura di file Jenkins 2.50 fino a 2.423 entrambe incluse, LTS 2.60.1 fino a 2.414.1 entrambe incluse Riferimenti: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...
CVE-2022-4174_CVE-2022-41742
CVE-2022-4174CVE-2022-41742 PoC para CVE-2022-4174CVE-2022-41742 para determinar se o Nginx 1.22.1 é vulnerável [email protected] Este PoC permite determinar se um servidor Nginx na versão 1.22.1 é vulnerável a certas vulnerabilidades conhecidas, incluindo: CVE-2022-41741 : Corrupção de...
EUVD-2026-42395
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript...
CVE-2024-23746
CVE-2024-23746 Miro Desktop 0.8.18 unter macOS ermöglicht Electron-Codeinjektion. PoC Signatur und Version: Verwendetes Werkzeug zur Untersuchung der Schwachstelle: https://github.com/r3ggi/electroniz3r Überprüfen, ob verwundbar: Blind Shell injizieren: Referenzen...
CVE-2026-79777
rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...
CVE-2026-55581 mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowedexecutables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell...
CVE-2026-79777 rclone before v1.75.0 Information Disclosure via RC API
rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...
EUVD-2026-53582
praisonaiagents has a webcrawl SSRF protection bypass via unchecked redirect targets...
ROOT-OS-DEBIAN-12-CVE-2025-68344 CVE-2025-68344 in linux - Patched by Root
Root has patched CVE-2025-68344 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-71073 CVE-2025-71073 in linux - Patched by Root
Root has patched CVE-2025-71073 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-39931 CVE-2025-39931 in linux - Patched by Root
Root has patched CVE-2025-39931 in the linux package for Root:Debian:12. Multiple fixed versions available...