701474 matches found
WordPress VK Blocks plugin <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin VK Blocks versions = 1.126.1...
CVE-2026-50181
CVE-2026-50181 Langroid path traversal in file tools allowed read/write outside the configured current directory. Primary advisory: GHSA-fg23-3346-88f5 GitHub advisory database: github.com/advisories/GHSA-fg23-3346-88f5 Researcher credit: @chaitanyagarware At a Glance Field| Value ---|--- CVE|...
XeytanWin32-RAT
WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...
EUVD-2026-101473
ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services...
CVE-2026-15102 Cleartext Transmission of Sensitive Information in ADP Desktop SDK
ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services...
CVE-2026-15102
The ADP Desktop SDK is vulnerable to the cleartext transmission of sensitive information (CWE-319). If exploited, this vulnerability can lead to unauthorized access to Autodesk services . No specific root cause, affected versions, or remediation instructions are provided in the documents. No expl...
CVE-2026-91881
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...
CVE-2026-76113
Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfishcertificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading...
EUVD-2026-101430
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response...
ProxyShell
ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...
EUVD-2026-101422
A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...
CVE-2026-86563 Dpdk: dpdk: double offset bug in vhost log mapping calculation
A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...
CVE-2026-86563
A flaw exists in DPDK lib/vhost due to a double-offset bug during vhost log mapping calculation. This calculation error can result in incorrect memory access . No specific exploits or in-the-wild exploitation details are provided, and no mitigation is currently available.
EUVD-2026-101295
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access
rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...
CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access
rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...
CVE-2026-49206
The rapidcsv C++ CSV parser library is vulnerable to an integer overflow in the RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames functions. The root cause is the conversion of size_t indexes to int before being added to std::vector iterators. On 64-bit systems, dimensions exce...
CVE-2026-93683
A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an...
CVE-2026-86848
A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend. Mitigation Do not attach a virtio-crypto vhost-user backend to untrusted guests...