EUVD-2026-104861

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command injection. The attack requires a local approach. The exploit has...

CVE-2026-113378 mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command injection. The attack requires a local approach. The exploit has...

CVE-2021-41773

CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi For use only in controlled environments that you own. Do not use against systems without authorization. Description Proof of concept developed to demonstrate and understand the vulnerability CVE-2021-41773 , present in Apache HTTP Server 2.4.4...

CVE-2020-26061

CVE-2020-26061 ClickStudios Passwordstate Password Reset Portal Authentication Bypass Information Vendor: ClickStudios Product: Passwordstate Versions Affected: Before 8.5 build 8501 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 Description ClickStudios Passwordstate...

CVE-2020-13889

Author: Andre k Lorenci Contact: [email protected] CVE-2020-13889 Hello, this vulnerability consists in a function called showAlert in the administration panel of bludit,that when accessed in DOM, allows users define the text to be popped up in the message box. But this function dont have an...

CVE-2026-43841

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function...

CVE-2026-43842

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function when msglen is set to 0...

CVE-2026-43840

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the ondisconnected callback function...

EUVD-2026-104857

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

CVE-2026-43856

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

CVE-2026-43856

A stack-based buffer overflow vulnerability exists in the FileProcess::CheckDir function. This flaw could allow a remote authenticated attacker to achieve arbitrary code execution by providing a path longer than 1024 bytes . No specific software vendor or version is explicitly identified in the p...

CVE-2026-43856

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

CVE-2024-40508

CVE-2024-40508 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMConference.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMConference.asmx function. Vulnerable Product...

cve-2021-41773-source-code-analysis

Apache HTTP Server CVE-2021-41773 Source Code Analysis A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 Apache HTTP Server Path Traversal by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation...

Encoding Error

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Encoding Error via the decodeValidScheme function, which decoded percent-encoded URI schemes using the deprecated unescape global including the JavaScript-only %uXXXX form before...

Encoding Error

Overview org.webjars.npm:fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Encoding Error via the decodeValidScheme function, which decoded percent-encoded URI schemes using the deprecated unescape global including the JavaScript-only %uXXXX fo...

nmmp

nmmp Runs Dalvik bytecode based on dex-vm to protect dex and increase the difficulty of decompilation. The project is divided into two parts. nmm-protect is a pure Java project that converts dex, transforming the data in dex into C structs, and randomizes opcodes to generate an NDK project; after...

CVE-2023-36319

CVE-2023-36319 By modifying the compression plug-in command, the attacker can cause the server to execute arbitrary commands during the upload process. Only used for authorized security testing, please do not use it for illegal purposes. Violations have nothing to do with the author. Affected...

CVE-2026-20127-Exploit-Extension

Executive Summary The CVE-2026-20127 Defensive Companion is a premier, enterprise-grade Browser Extension engineered for proactive threat intelligence and defensive analysis. This tool encapsulates authoritative technical research concerning the authentication bypass vulnerability in the Cisco...

WSUSResponder

🧰 WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT 🎯 Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...