697096 matches found
CVE-2026-117503 a2aproject a2a-go REST SSE handler rest.go resource consumption
A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the attack remotely. Upgrading to version 2.5.0 is recommended t...
CVE-2026-117503 a2aproject a2a-go REST SSE handler rest.go resource consumption
A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the attack remotely. Upgrading to version 2.5.0 is recommended t...
CloudPanel rootDirectory nginx vhost injection RCE
Authenticated panel: poison site rootDirectory with injected nginx locations, anonymous PUT PHP under /tmp, FastCGI exec as root confirm via handler. """CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Root Directory Field CWE-93""" from future import annotatio...
vMix ScriptStartDynamic blocklist bypass RCE
Unauthenticated GET /api/?Function=ScriptStartDynamic&Value=... runs attacker VB.NET that calls Process.Startcmd.exe, /c .... !/usr/bin/env python3 -- coding: utf-8 -- """vMix ScriptStartDynamic VB.NET blocklist bypass RCE.""" from future import annotations import re from urllib.parse import quot...
Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the Web
Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor Application CWE-306, CWE-78 """Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor...
Exploit for CVE-2026-1296
CVE-2026-1296 — Frontend Post Submission Manager Lite Proof...
CVE-2026-117555
The GreycLab CImg library, version through 4.0.6 , is vulnerable to a heap out-of-bounds read within the _load_bmp() function of CImg.h. The root cause is an integer overflow in the row byte count, which can be triggered by providing a crafted BMP file with a large header width that wraps dx_byte...
CVE-2026-117555 GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...
EUVD-2026-110833
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...
CVE-2026-117555 GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...
CVE-2026-117555
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...
CVE-2026-117554
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
EUVD-2026-110832
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
CVE-2026-117554
Admidio versions before 5.0.17 are vulnerable to an improper access control vulnerability in modules/events/events_function.php. Authenticated members can bypass guest restrictions by submitting the additional_guests field when guests are otherwise disallowed. This allows an attacker to set the v...
CVE-2026-117554 Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
CVE-2026-117554 Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...
ftw
Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...
Interpretation Conflict
Overview @fastify/express is an Express compatibility layer for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via the normalizeUrl function in index.js when the non-default ignoreDuplicateSlashes option is enabled. When an absolute-form request target e.g...
CVE-2026-41089-Netlogon-RCE
🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...