CVE-2026-14888

The IBM DataPower Gateway is vulnerable to a heap-based buffer overflow in versions 10.5.0.0 through 10.5.0.22 , 10.6.1 through 10.6.6 , 10.6.0.0 through 10.6.0.10 , and 11.0.0.0 through 11.0.0.2 . This security flaw could enable a remote attacker to achieve arbitrary code execution . No specific...

CVE-2026-14888 IBM DataPower Gateway Buffer Overflow

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

EUVD-2026-94992

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-93034

SGLang is affected by an arbitrary code execution vulnerability originating from the ZMQ message decoder . The root cause is the unconditional deserialization of PickleWrapper payloads using pickle.loads() within the _maybe_unwrap_pickle function, which lacks type allowlisting or authentication. ...

CVE-2026-93034 CVE-2026-93034

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads in maybeunwrappickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when...

EUVD-2026-94989

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads in maybeunwrappickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when...

Nuclei-Template-CVE-2024-1561

Template Nuclei per CVE-2024-1561 Questo template Nuclei è progettato per rilevare la vulnerabilità Gradio CVE-2024-1561 nelle applicazioni web. Gradio è una libreria Python per creare componenti UI personalizzabili attorno ai modelli di machine learning. Questa vulnerabilità può consentire agli...

CVE-2025-67730

CVE-2025-67730 – Cross-Site Scripting XSS Memorizzato Panoramica CVE ID: CVE-2025-67730 Tipo di vulnerabilità: Cross-Site Scripting XSS Memorizzato Gravità: Media–Alta dipende dal contesto Questa vulnerabilità permetteva a utenti autenticati di iniettare HTML e JavaScript dannosi nei campi...

CVE-2025-53547-POC

CVE-2025-53547 POC questa è una POC per CVE-2025-53547 Chart.lock collega il file di test a /tmp/1.txt /tmp/1.txt inietta un comando che crea /tmp/2.txt In un ambiente di prodotto reale, puoi modificare il file di collegamento Chart.lock per iniettare qualsiasi comando desideri come: /root/.bashr...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Analisi degli Alert SOC: Lettura Arbitraria di File su Checkpoint Security Gateway CVE-2024-24919 Introduzione CVE-2024-24919 è una vulnerabilità zero-day critica nei Check Point Security Gateway che consente ad attaccanti remoti non autenticati di leggere file arbitrari dai sistemi interessati...

CVE-2020-19360

CVE-2020-19360 Fhem PoC per lettura arbitraria di file Ricerca FOFA title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com Test singolo URL python3 Fhem.py -f url.txt Verifica batch Suggerimento Al termine della scansione, verrà automaticamente generato un...

Rust_CVE-2025-55182

CVE-2025-55182 Strumento di sfruttamento delle vulnerabilità versione Rust Panoramica del progetto Questo progetto è uno strumento di ricerca sulla sicurezza sviluppato in Rust, mirato alla vulnerabilità di esecuzione remota di codice RCE presente in [email protected]. La vulnerabilità...

CVE-2020-5902

Readme F5 BIG-IP lettura file arbitrari + esecuzione remota di comandi RCE +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...

CVE-2021-43798

GrafanaArbitraryFileRead Utilizzo 1. mostra info ❯ go run main.go -s INF VulnInfo: "Name": "Grafana Arbitrary File Read", "VulID": "nil", "Version": "1.0", "Author": "z3", "VulDate": "2021-12-07", "References": "https://nosec.org/home/detail/4914.html" , "AppName": "Grafana", "AppPowerLink":...

CVE-2026-14991

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a buffer overflow (CWE-787: Out-of-bounds Write). This flaw is caused by improper bounds checking , which could allow a local user to overf...

CVE-2026-14991 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

EUVD-2026-94985

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2026-14991 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2026-15781 IBM DataPower Gateway Buffer Overflow

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-15781

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a stack-based buffer overflow (CWE-121). This flaw could allow a remote authenticated attacker to execute arbitrary code on the system. IBM...