644409 matches found
EUVD-2026-86320
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started with the documented HTTP transport mode, for example --transport http --port 8080. The HTTP server attempts to protect...
CVE-2026-97454
In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpipsgetnextfield Add boundary checks in acpipsgetnextfield to prevent out-of-bounds access...
CVE-2026-97444
In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpipsgetnextnamestring and acpipspeekopcode to prevent out-of-bounds access...
CVE-2026-97413
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...
CVE-2026-93806
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate assoc response length before status and IE access cfg80211rxassocresp initialises the status and response-IE fields of cfg80211connectrespparams from the management frame before proving that the frame is...
CVE-2026-93790
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...
CVE-2026-84302
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated with private messages could appear in the moderator review queue of a moderator who was not a participant in the message. Reviewable visibility filtering did n...
CVE-2026-3844
CVE-2026-3844 β Breeze Cache RCE Unauthenticated Arbitrary File Upload β Remote Code Execution...
CVE-2024-55457-PoC
CVE-2024-55457-PoC MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of...
CVE-2026-21962-o
CVE-2026-21962 It is my first CVSS 10.0 CVE! πβ π―γοΈποΈπ΅ Summary Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. IMPORTANT: Message from orignal Finder Consider the potential damage to...
SirepRAT
SirepRAT - RCE as SYSTEM on Windows IoT Core SirepRAT Features full RAT capabilities without the need of writing a real RAT malware on target. Context The method is exploiting the Sirep Test Service thatβs built in and running on the official images offered at Microsoftβs site. This service is th...
CVE-2026-32606-POC
Proof-of-Concept for CVE-2026-32606 This repo has simple proof-of-concept code exploiting a common weakness initially described over a year ago at https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/. While it specifically targets IncusOS, the attack is pretty generic against most...
CVE-2026-31431
CVE-2026-31431 POC for CVE-2026-31431 Script The script is a small 10-lines POC that allows any user to become root on a machine...
CVE-2026-35616-detector.py
CVE-2026-35616 - FortiClient EMS Vulnerability Detector Description This tool detects if a FortiClient EMS server is vulnerable to CVE-2026-35616 , a critical improper access control vulnerability affecting versions 7.4.5 through 7.4.6. CVSS Score: 9.1 Critical CWE: CWE-284 Improper Access Contro...
CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC
π CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit β οΈ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. π Description Exploit for CVE-2026-3055 - out-of-bounds read memory overread vulnerability in NetScaler ADC an...
CVE-2026-21533_Scanner.py
CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool This repository contains a detection tool for the CVE-2026-21533 vulnerability, a privilege management flaw in Windows Remote Desktop Services RDS that could allow a local attacker to elevate their privileges to SYSTEM...
kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists
A flaw was found in the drm/xe/rtp component of the Linux kernel. This vulnerability arises from the unconditional whitelisting of Output/Availability OA registers, which is a security violation. By default, these registers could be whitelisted after system events such as probe, graphics...
kernel: drm/amdgpu/vce: fix integer overflow in image size
A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...
CVE-2025-46818
CVE-2025-46818 β Redis Lua Sandbox Cross-User Escape Sandbox escape via deprecated Lua APIs and mutable metatables on Redis 8.2.1. Overview Redis 8.2.1 keeps deprecated Lua builtins getfenv, setfenv, newproxy exposed to scripts and fails to lock metatables for basic types. An attacker can inject...