CVE-2019-0888

CVE-2019-0888 PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects ADO Write-up: https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...

azuredevops-enum

ado-enum A command-line tool for enumerating Azure DevOps organisations using a Personal Access Token PAT. It queries the Azure DevOps REST API to surface projects, repositories, service connections, builds, build artefacts, and security settings — useful during authorised security assessments of...

PT-2026-80671

Stata Command Injection via Unsanitized package in ado package install Summary The ado package install MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +127 more potentially affected by CVE-2026-54233 via vllm (>=0.1.3, <=0.23.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-54233 Source advisory: GHSA-6PR9-RP53-2PMC...

ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.5.0, <=0.5.1) +23 more potentially affected by CVE-2026-12491 via vllm (>=0.11.0, <=0.23.0)

vllm PYPI version =0.11.0, =1.2.2, =0.5.0, =0.3.9.post2, =0.5.2, =0.1.0, =0.2.4, =2.5.3, =0.0.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-12491 Source advisory: OSV:GHSA-8JR5-V98P-W75M...

CVE-2026-5083

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

CVE-2026-5083

The Ado::Sessions Perl module (versions through 0.935 ) generates insecure session IDs , which could allow an attacker to gain unauthorized access to systems. The root cause is that session IDs are generated from a SHA-1 hash seeded with the built-in rand function, the epoch time , and the proces...

CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

PT-2026-31088

Name of the Vulnerable Software and Affected Versions Ado::Sessions versions through 0.935 Description The Ado::Sessions Perl module generates insecure session IDs. The session ID is created using a SHA-1 hash seeded with the built-in rand function, the epoch time, and the process ID PID. The PID...

Ado::Sessions security vulnerability

Ado::Sessions is a lightweight Perl-based web application development framework developed by. Versions of Ado::Sessions prior to 0.935 contained security vulnerabilities; these vulnerabilities stemmed from the generation of insecure session IDs, which could lead to session hijacking...

CVE-2026-5083: Generation of Predictable Numbers or Identifiers

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +67 more potentially affected by CVE-2026-25048 via xgrammar (>=0.1.11, <=0.1.29)

xgrammar PYPI version =0.1.11, =1.2.2, =2.3.5.dev0, =0.8.4, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =1.1.2, =0.0.4, =2025.12.1 and more Source cves: CVE-2026-25048 Source advisory: MEND:CVE-2026-25048...

ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +45 more potentially affected by CVE-2026-22778 via vllm (>=0.8.3, <=0.14.0)

vllm PYPI version =0.8.3, =1.2.2, =2.3.5.dev0, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.1.21, =0.1.10, =1.1.2, =0.0.4, =0.3.9.post2, =0.5.2, =0.1.1, =0.2.0 and more Source cves: CVE-2026-22778 Source advisory: MEND:CVE-2026-22778...

ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.4.2) +17 more potentially affected by CVE-2026-22807 via vllm (>=0.10.1, <=0.13.0)

vllm PYPI version =0.10.1, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.0, =0.1.1, =0.2.0, =0.0.0, =0.1.0.0, =0.1.0, =0.1.5.2 and more Source cves: CVE-2026-22807 Source advisory: OSV:GHSA-2PC9-4J83-QJMR...

ado-vllm-performance (>=1.2.2, <=1.3.3), caption-flow (>=0.1.0, <=0.4.2) +15 more potentially affected by CVE-2026-56340 via vllm (>=0.10.2, <=0.12.0)

vllm PYPI version =0.10.2, =1.2.2, =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.0, =0.1.1, =0.2.0, =0.0.0, =0.1.0.0, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-56340 Source advisory: OSV:GHSA-MCMC-2M55-J8JJ...

Linux Distros Unpatched Vulnerability : CVE-2025-46337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a...

Linux Distros Unpatched Vulnerability : CVE-2011-3699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation...

MAL-2025-9728 Malicious code in @zalastax/nolb-_ado (npm)

The package @zalastax/nolb-ado was found to contain malicious code...

DEBIAN-CVE-2025-54119

ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database a...