115232 matches found
Exploit for CVE-2026-9830
CVE-2026-9830 Investigation Overview This directory contai...
Web-Application-Vulnerability-Scanner
...
Openfire Administration Console - Authentication Bypass
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...
PT-2026-65295
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 Description A buffer overflow occurs due to...
PT-2026-64901
Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...
PT-2026-66879
Уязвимость программного обеспечения выявления уязвимостей и ошибок PT Application Inspector связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...
PT-2026-64904
Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...
CVE-2026-43672: Incorrect Authorization
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences...
CVE-2026-64772: Out-of-bounds Write
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination o...
PT-2026-64902
Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress Software ECS Connection Manager affected versions not specified Progress Software Object Scale Connection Manager affected versions not specified Progress Software MOVEit WA...
CVE-2026-17573: Double Free
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free...
PT-2026-64894
Forensic Master Report: API and GPS Infrastructure Interference 1. Threat Actor Identification and Landscape Forensic telemetry identifies a multi-tiered adversarial campaign characterized by a sophisticated coordination between institutional actors and Advanced Persistent Threat APT groups. The...
Wapiti Web Application Vulnerability Scanner 3.3.1
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...
PT-2026-65095
Name of the Vulnerable Software and Affected Versions Ekushey Project Manager CRM versions prior to 5.1 Description A stored cross-site scripting issue exists where authenticated client users can inject arbitrary HTML and JavaScript. This occurs when malicious payloads are entered into the Reply...
CVE-2021-32084
The Quest KACE Systems Deployment Appliance (SMA) 11.0.273 is vulnerable to an improper access control issue where API endpoints are not restricted even if the web console is limited by IP address or subnets. If an attacker obtains valid credentials or API keys , they can bypass these network res...
SUSE CVE-2026-44621
With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if the threshold is reached and libunbound needs to call 'libworkeralloccleanup' since the function is absent from the...
ethical-hacking-elewayte-projects
Ethical Hacking Projects — Elewayte Externship Penetration te...
Denial Of Service
React Router is vulnerable to Denial Of Service. The vulnerability is due to insufficient protection of the manifest endpoint, where unauthenticated targeted requests can generate excessive server load, allowing attackers to degrade application performance and slow response times...
opentaint analyzer/2026.07.24.401b297
The open source taint analysis engine for the AI era Formal taint analysis for application security — finds what AST-pattern matchers miss, lets LLM agents enact rules from vulnerabilities, scales where neither can alone. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dan...
PT-2026-65813
Name of the Vulnerable Software and Affected Versions cJSON versions prior to 1.7.20 Description The issue involves uncontrolled recursion in the cJSONUtils ApplyPatches and cJSONUtils ApplyPatchesCaseSensitive functions. When an untrusted RFC 6902 JSON Patch is applied, an attacker can use add a...