690449 matches found
CVE-2026-114243
A security flaw exists in the dhikshitha29 Insurance-Management-System within the mysqli_query function of the /Agent/ManagePolicy/EditPolicyHolder.php file. Remote attackers can perform an SQL injection by manipulating the Policy_no/Name arguments. While the project utilizes a rolling release st...
CVE-2026-84747 Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments
Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...
EUVD-2026-107223
Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...
CVE-2026-84747
Apache bRPC (versions
CVE-2024-9593-Exploit
CVE-2024-9593-Exploit The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attacker...
Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2026-54291)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-54291 DESCRIPTION: pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from...
Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities (CVE-2026-80179)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-80179 DESCRIPTION: A flaw was found in jwcrypto...
RLSA-2026:85321 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: sctp: diag: reject stale...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. "The most distinctive technical marker for Bronze Sandcastle is its consistent us...
CVE-2026-82231 Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client
A Thrift client in Apache bRPC version 1.18.0, built with WITHTHRIFT which is off by default can be crashed by the server peer it talks to. When the server returns a TEXCEPTION reply whose exception struct is malformed, the client decodes it without catching what Apache Thrift throws...
EUVD-2026-107218
A Thrift client in Apache bRPC version 1.18.0, built with WITHTHRIFT which is off by default can be crashed by the server peer it talks to. When the server returns a TEXCEPTION reply whose exception struct is malformed, the client decodes it without catching what Apache Thrift throws...
CVE-2026-82231
A Thrift client in Apache bRPC (versions
PoC-CVE-2019-12840
Exploit for CVE-2019-12840 in Webmin This repository contains a Python script that exploits the CVE-2019-12840 vulnerability in Webmin. Description The script attempts to log in to a Webmin server and then exploit the CVE-2019-12840 vulnerability. The script accepts several command-line arguments...
Offensive-lab-2
Offensive security Lab : ProFTPD 1.3.3c Backdoor Exploit Root Flag 1. Introduction and Objectives This report details the penetration test performed on a vulnerable Linux virtual machine VM, focusing on identifying a high-risk service vulnerability that allowed for immediate root access. Detail|...
MSC-2026-13007
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • An application crash is an unexpected terminati...
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms
Summary Multiple vulnerabilities were identified in third-party components and libraries used by CICS Transaction Gateway for Multiplatforms, including libexpat, GNU Debugger, Libevent, Jackson Databind, Jackson Core and Expat. To address these vulnerabilities, the affected components and librari...
EUVD-2026-107180
An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...
CVE-2026-74755 Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service
An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...
CVE-2026-74755
Apache bRPC (versions prior to 1.18.0 ) is vulnerable to a Denial of Service due to an integer underflow in the mcpack2pb component. The UnparsedValue::as_string() function in src/mcpack2pb/parser.cpp fails to validate the value_size of string fields from network data; when the size is 0, the cal...