EUVD-2026-67954

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal...

EUVD-2026-67952

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

EUVD-2025-210810

IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation...

padding-oracle-attacker

padding-oracle-attacker CLI-Tool und Bibliothek zur einfachen Durchführung von Padding-Oracle-Angriffen, mit Unterstützung für gleichzeitige Netzwerkanfragen und einer eleganten Benutzeroberfläche. Installation Stelle sicher, dass Node.js installiert ist, und führe dann Folgendes aus root@kitploi...

leonidas

Leonidas Questo è il repository che contiene Leonidas, un framework per eseguire azioni di attaccante nel cloud. Fornisce un formato basato su YAML per definire tattiche, tecniche e procedure TTP dell'attaccante nel cloud e le relative proprietà di rilevamento. Queste definizioni possono poi esse...

CVE-2024-11003-POC

CVE-2024-11003-POC Beschreibung Qualys entdeckte, dass needrestart vor Version 3.8 unsanitisierte Daten an eine Bibliothek Modules::ScanDeps übergibt, die sichere Eingaben erwartet. Dies könnte es einem lokalen Angreifer ermöglichen, beliebige Shell-Befehle auszuführen. Siehe auch die zugehörige...

CVE-2026-22056

StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher are susceptible to a Denial of Service vulnerability when deployed in a non-standard configuration and scenario. A successful exploit allows an attacker with low privileges and some control over the environment to cause a partia...

CVE-2026-3627

IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to SQL injection . A remote attacker with no prior authentication can send specially crafted SQL statements to view, add, modify, or delete data in the back-end database. The vulnerability is rated CVSS 9.1 (CRITICAL) with a network attack v...

CVE-2026-18545

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain a server-side request forgery (SSRF) vulnerability (CWE-918) in the unified model instantiation path. Provider SDK clients such as ChatOllama and ChatOpenAI are constructed using tenant-controlled base URLs without invoking the connector SSRF...

CVE-2026-18527

IBM Application Runtime Expert (ARE) for i , version V1R1M0 , contains a privilege escalation flaw in the ARE GUI component processing, classified as CWE-384 (Session Fixation) . An unauthenticated remote attacker can execute actions under another user's authenticated profile, gaining elevated pr...

CVE-2026-16821

CVE-2026-16821 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where a format string vulnerability allows a local attacker with low privileges to gain elevated privileges , resulting in high impact to confidentiality, integrity, and availability. The CVSS 3.1 score is 7.0 (HIGH) with a vector...

CVE-2025-64649

IBM Concert versions 1.0.0 through 2.3.1 are affected by improper certificate validation , allowing a remote attacker to perform unauthorized actions via man-in-the-middle techniques. The vulnerability carries a CVSS 3.1 score of 5.9 (MEDIUM) with a high attack complexity, no privileges required,...

CVE-2026-56100

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2025-24071

CVE-2025-24071 CNA: Microsoft Corporation Veröffentlicht: 2025-03-11 Aktualisiert: 2025-03-13 Titel: Microsoft Windows Datei-Explorer Spoofing-Sicherheitslücke Beschreibung Die Offenlegung sensibler Informationen gegenüber einem nicht autorisierten Akteur im Windows-Datei-Explorer ermöglicht es...

CVE-2026-64638

CVE-2026-64638 Donazioni Supporta la manutenzione di questo progetto con PayPal o scansionando il codice QR qui sotto. ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Configurazioni di laboratorio isolate Ambien...

CVE-2026-51565

CVE-2026-51565 Avviso di sicurezza per CVE-2026-51565 Descrizione La vulnerabilità di cross-site scripting XSS in Modules/Docs/DocsController.php in Milk admin =0.9.8 consente ad attaccanti remoti di iniettare script web o HTML arbitrari tramite il parametro action in una richiesta appositamente...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner Un attaccante remoto può costruire una richiesta HTTP speciale per assumere il controllo della Console di WebLogic Server senza autenticazione. Installazione e utilizzo git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Incorrect authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: OverlayFS में विशेषाधिकार उन्नयन भेद्यता 🛡️ OverlayFS में Linux कर्नेल की विशेषाधिकार उन्नयन भेद्यता के लिए सुरक्षा सलाह और शमन मार्गदर्शिका। अवलोकन CVE-2022-0944 Linux कर्नेल के OverlayFS सबसिस्टम में एक सुरक्षा भेद्यता है जो स्थानीय हमलावरों को विशिष्ट कॉन्फ़िगरेशन में फ़ाइल...

CVE-2023-43148

CVE-2023-43148 Autore: Aitor Herrero Fuentes Fornitore: SPA-Cart Homepage del fornitore: https://spa-cart.com/ Link del software: https://demo.spa-cart.com/admin Versione: 1.9.0.3 Testato su: Windows 10 Pro CSRF ELIMINA TUTTI GLI ACCOUNT La vulnerabilità Cross Site Request Forgery nell'applicazio...