452517 matches found
CVE-2026-21020-Protobuf-Message-Parsing-Polymorphic-Deserialization-Vulnerability
CVE-2026-21020 – Protobuf Message Parsing Polymorphe Deserialisierungs-Schwachstelle Programmcode Python mit protobuf protovuln.py - Insecure handling of Any type import addressbookpb2 Example protobuf Simulated deserialization that trusts an injected typeurl from google.protobuf import anypb2...
flowise-arbitrary-file-read-getFileFromStorage
Flowise lettura arbitraria di file non autenticata getFileFromStorage — nuova CVE proposta Una vulnerabilità separata da CVE-2025-71338 che è il write sink. Si tratta di una lettura arbitraria di file non autenticata nel percorso "rehydrate" del loader document-store di Flowise, che interessa le...
CVE-2026-13714
CVE-2026-13714 Plugin Realtyna Organic IDX + WPL Real Estate 5.3.0 - Caricamento arbitrario di file non autenticato che consente l'esecuzione di codice remoto CVE-2026-13714 — RCE non autenticata in WPL Real Estate Plugin Realtyna Organic IDX + WPL Real Estate per WordPress 5.3.0 Caricamento...
IoRingReadWritePrimitive
IoRingReadWritePrimitive Post-Exploitation-Technik, um beliebige Kernel-Schreibvorgänge / Inkremente in eine vollständige Lese-/Schreib-Primitive auf Windows 11 22H2+ umzuwandeln. Dieser PoC verwendet den HackSysExtremeVulnerableDriver. Der PoC unterstützt sowohl beliebiges Schreiben als auch...
security-research
Ricerca sulla sicurezza Una raccolta di file relativi alla mia ricerca personale sulla sicurezza. Contenuti aggiuntivi saranno pubblicati sul mio blog https://blog.mirch.io. Strumenti Tool| Descrizione ---|--- openssldircheck| Utilità Windows per verificare potenziali percorsi insicuri utilizzati...
marshalsec
Java Unmarshaller Security - Trasformare i tuoi dati in esecuzione di codice Se sei arrivato qui per Log4Shell/CVE-2021-44228, potresti voler leggere i vettori di sfruttamento e le versioni del runtime Java interessate: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper Sono...
CVE-2026-106177
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer
A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...
kernel: nfsd: initialize copy-notify stateid before publishing it
A flaw was found in the nfsd component of the Linux kernel. A use-after-free vulnerability exists due to improper initialization of the copy-notify state ID before its publication. A remote attacker could exploit this by sending a crafted OFFLOADCANCEL operation, leading to a race condition that...
qu1ckr00t
qu1ckr00t Un'applicazione PoC che dimostra la potenza di una lettura/scrittura arbitraria del kernel Android CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t è una PROVA DI CONCETTO. NON dovrebbe essere usato sul tuo dispositivo personal...
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer
A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...
kernel: nfsd: initialize copy-notify stateid before publishing it
A flaw was found in the nfsd component of the Linux kernel. A use-after-free vulnerability exists due to improper initialization of the copy-notify state ID before its publication. A remote attacker could exploit this by sending a crafted OFFLOADCANCEL operation, leading to a race condition that...
Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...
postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...
postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...
Security Bulletin: Multiple vulnerabilities affect the Windows S-TAP component as part of IBM Guardium Data Protection (CVE-2026-82344, CVE-2026-82334)
Summary Multiple vulnerabilities have been addressed in the Windows S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-82344 DESCRIPTION: IBM Security Guardium is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly...