nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

CVE-2024-0044

CVE-2024-0044 Overview CVE-2024-0044 is a vulnerability discovered in certain Android applications that allows attackers to escalate privileges by exploiting a flaw in the run-as command. This vulnerability can be exploited by crafting a specific payload that grants unauthorized access to...

CVE-2026-97801

A flaw was found in .NET Framework. An unauthenticated remote attacker could exploit improper input validation by sending specially crafted input over the network. Successful exploitation allows an attacker to tamper with application data and make unauthorized modifications to the system state...

EUVD-2026-106267

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Application Data Sets. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60869

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Application Data Sets. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60869

A vulnerability exists in the Application Data Sets component of Oracle PeopleSoft (Enterprise PeopleTools) affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to gain unauthorized access to create, delete, or ...

CVE-2026-112148

A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting XSS flaw allows an attacker to execute arbitrary JavaScript in the origin of an affected LIFF application's endpoint when a user opens a specially crafted URL in an external...

CVE-2026-112148

A DOM-based cross-site scripting (XSS) flaw exists in the LIFF SDK versions 2.20.0 through 2.31.0 . An attacker can execute arbitrary JavaScript within the origin of an affected LIFF application's endpoint by tricking a user into opening a specially crafted URL in an external browser. This could ...

CVE-2026-112148

A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting XSS flaw allows an attacker to execute arbitrary JavaScript in the origin of an affected LIFF application's endpoint when a user opens a specially crafted URL in an external...

EUVD-2026-104810

A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting XSS flaw allows an attacker to execute arbitrary JavaScript in the origin of an affected LIFF application's endpoint when a user opens a specially crafted URL in an external...

CVE-2026-39989

A server-side request forgery SSRF vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312...

CVE-2026-39989

A server-side request forgery (SSRF) vulnerability affects QNAP Download Station . An attacker who has obtained a valid user account can exploit this flaw to read application data . Remediation is available in Download Station 5.10.1.312 and 5.11.2.321 and later versions. No specific exploit info...

CVE-2026-39989 SSRF in QNAP Download Station

A server-side request forgery SSRF vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312...

EUVD-2026-101977

A server-side request forgery SSRF vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312...

CVE-2026-107104 Unsafe Deserialization Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successf...

PT-2026-107428

This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successf...

CVE-2026-102125

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could...

CVE-2026-102759

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In nxsecureverifymac, a decrypted application record whose length equals the negotiated MAC size is treated as valid and returns success after advancing the receive sequence number. The...

CVE-2026-102759

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In nxsecureverifymac, a decrypted application record whose length equals the negotiated MAC size is treated as valid and returns success after advancing the receive sequence number. The...