69456 matches found
crypto-scanner
Scan your codebase for quantum-vulnerable cryptography before it's too late. Quick Start • Why Quantum-Ready? • Usage • Risk Levels • CI/CD • About Overview Crypto Scanner is a CLI tool that scans your codebase for cryptographic algorithms and generates quantum-vulnerability risk assessments. It...
CVE-2026-61511
VBulletin RCE POC Telegram : @esp256 Support : massive/single scan Fofa Dork root@kitploit: body="Powered by vBulletin" body="vbulletin/core/cpstyles" body="Powered by vBulletin" && body="6.2" body="Powered by vBulletin" && body="6.1" body="Powered by vBulletin" && body="6."...
CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser
9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...
CVE-2024-25153
CVE-2024-25153 Este es una prueba de concepto para CVE-2024-25153, una vulnerabilidad de Ejecución Remota de Código en Fortra FileCatalyst Workflow 5.x, antes de 5.1.6 Build 114. Los detalles técnicos completos se pueden encontrar en...
CVE-2026-85751
Mailu is a mail server distributed as a set of Docker images. In deployments where PROXY_AUTH_WHITELIST was configured but REAL_IP_HEADER was unset (Mailu 2.0 through 2024.06.54; helm-charts prior to 2.7.3), nginx trusted a client-controlled X-Forwarded-By header for proxy authentication. The pro...
CVE-2026-85751 Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust
Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXYAUTHWHITELIST configured but REALIPHEADER unset trusted a client-controlled X-Forwarded-By header for header-based proxy authentication. The...
CVE-2021-43798
CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...
grafana-CVE-2018-15727
Grafana CVE-2018-15727 exploit Installation root@kitploit: $ go get github.com/u238/grafana-CVE-2018-15727 Usage root@kitploit: $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for...
Security Bulletin: Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent
Summary Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent, IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-47913 DESCRIPTION: SSH clients receiving...
AZL-103388 CVE-2026-88806 affecting package libX11 1.8.7-1
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...
CVE-2026-88806
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...
AZL-103391 CVE-2026-88807 affecting package libXrender 0.9.11-1
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
UBUNTU-CVE-2026-88807
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
bazad5
bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...
CVE-2026-88807 libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
EUVD-2026-83916
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
CVE-2026-88807
libXrender (X.Org) versions before 0.9.13 are affected by a heap-based buffer overflow in the RenderQueryPictFormats reply handler. A malicious X server can exploit this to inject code into attached X clients. The vulnerability was assigned a CVSS 4.0 score of 8.9 (HIGH) , with active user intera...
CVE-2026-88806 libX11 XkbGetMap Reply Heap-based Buffer Overflow
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...
CVE-2026-88806
libX11 versions before 1.8.14 are vulnerable to a heap-based buffer overflow in the handling of the XkbGetMap reply, specifically overflowing the key_sym_map buffer. A malicious X server can trigger this, leading to potential compromise of confidentiality, integrity, and availability as rated by ...