77 matches found
CVE-2019-0888
CVE-2019-0888 PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects ADO Write-up: https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...
azuredevops-enum
ado-enum A command-line tool for enumerating Azure DevOps organisations using a Personal Access Token PAT. It queries the Azure DevOps REST API to surface projects, repositories, service connections, builds, build artefacts, and security settings — useful during authorised security assessments of...
Malicious code in demdadf-sadudar-ado (npm)
Source: amazon-inspector bb080b4ed5656b9ab5867a83060d7d508b761e46ae61eb4af640f95fa9a0de28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
PT-2026-80671
Stata Command Injection via Unsanitized package in ado package install Summary The ado package install MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent...
aana (>=0.2.1, <=0.2.2.2), ado-vllm-performance (>=1.2.2, <=1.3.3) +124 more potentially affected by CVE-2026-54233 via vllm (>=0.1.3, <=0.23.0)
vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.3, =0.0.8 and more Source cves: CVE-2026-54233 Source advisory: GHSA-6PR9-RP53-2PMC...
ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.5.0, <=0.5.1) +22 more potentially affected by CVE-2026-12491 via vllm (>=0.11.0, <=0.23.0)
vllm PYPI version =0.11.0, =1.2.2, =0.5.0, =0.3.9.post2, =0.5.2, =0.1.0, =0.2.4, =2.5.3, =0.0.2, =0.1.0, =0.1.0, =3.0.0b10, =3.0.0b11 and more Source cves: CVE-2026-12491 Source advisory: OSV:GHSA-8JR5-V98P-W75M...
CVE-2026-5083
Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...
CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids
Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...
CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids
Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...
CVE-2026-5083
The Ado::Sessions Perl module (versions through 0.935 ) generates insecure session IDs , which could allow an attacker to gain unauthorized access to systems. The root cause is that session IDs are generated from a SHA-1 hash seeded with the built-in rand function, the epoch time , and the proces...
Ado::Sessions security vulnerability
Ado::Sessions is a lightweight Perl-based web application development framework developed by. Versions of Ado::Sessions prior to 0.935 contained security vulnerabilities; these vulnerabilities stemmed from the generation of insecure session IDs, which could lead to session hijacking...
PT-2026-31088
Name of the Vulnerable Software and Affected Versions Ado::Sessions versions through 0.935 Description The Ado::Sessions Perl module generates insecure session IDs. The session ID is created using a SHA-1 hash seeded with the built-in rand function, the epoch time, and the process ID PID. The PID...
CVE-2026-5083: Generation of Predictable Numbers or Identifiers
Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...
ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +66 more potentially affected by CVE-2026-25048 via xgrammar (>=0.1.11, <=0.1.29)
xgrammar PYPI version =0.1.11, =1.2.2, =2.3.5.dev0, =0.8.4, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =1.1.2, =0.0.4, =2025.12.1 and more Source cves: CVE-2026-25048 Source advisory: MEND:CVE-2026-25048...
ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +44 more potentially affected by CVE-2026-22778 via vllm (>=0.8.3, <=0.14.0)
vllm PYPI version =0.8.3, =1.2.2, =2.3.5.dev0, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.1.21, =0.1.10, =1.1.2, =0.0.4, =0.3.9.post2, =0.5.2, =0.1.1, =1.0.0.dev0, =1.0.3 and more Source cves: CVE-2026-22778 Source advisory: MEND:CVE-2026-22778...
ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.4.2) +16 more potentially affected by CVE-2026-22807 via vllm (>=0.10.1, <=0.13.0)
vllm PYPI version =0.10.1, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.0, =0.1.1, =0.2.0, =0.0.0, =0.1.0.0, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-22807 Source advisory: OSV:GHSA-2PC9-4J83-QJMR...
ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.4.2) +14 more potentially affected by CVE-2026-56340 via vllm (>=0.10.2, <=0.12.0)
vllm PYPI version =0.10.2, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.0, =0.1.1, =0.2.0, =0.0.0, =0.1.0.0, =0.1.0, =0.1.0, =0.9.2.post1, =0.10.0 and more Source cves: CVE-2026-56340 Source advisory: OSV:GHSA-MCMC-2M55-J8JJ...
Linux Distros Unpatched Vulnerability : CVE-2025-46337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a...
Linux Distros Unpatched Vulnerability : CVE-2011-3699
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation...