44290 matches found
Linux device driver framework Pegasus Probe
The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...
Linux USB Bulk Transport DoS
The vulnerability of the usbstorBulktransport function in the drivers/usb/storage/transport.c file of the Linux device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel sound subsystem Heap Buffer Overflow
The vulnerability of the nvhdmimcpprobe function in the sound/hda/codecs/hdmi/nvhdmi-mcp.c module of the Linux kernel’s sound subsystem is related to incorrect resource initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
VeloCloud Orchestrator Local Data Compromise
The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator VCO on the VMware SD-WAN by VeloCloud On-Prem platform is related to the failure to implement measures to neutralize certain elements. Exploiting this vulnerability could allow a malicious actor to...
NewStart CGSL MAIN 6.06 : grub2 Vulnerability (NS-SA-2026-0058)
The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by a vulnerability: - When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As...
CVE-2026-50738
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...
EUVD-2026-49938
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...
GHSA-28GM-JRMW-XX93 SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)
Impact A single malformed inbound UDP packet on the RTP/ICE socket can remotely terminate an active RTP or WebRTC media session. The packet receive handler indexes packet and STUN attribute bytes without sufficient length checks and throws, and the UDP receive loop converted any such exception in...
Moderate: Red Hat Security Advisory: resource-agents security update
An update for resource-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...
SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition Detection
SAP NetWeaver AS JAVA LM Configuration Wizard, versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an...
VMware Cloud Director Availability Login Panel - Detect
VMware Cloud Director Availability login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Cloud Director Availability login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting Detection
A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument sessionid leads to cross site scripting. The attack can be launched...
EUVD-2026-49731
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
CVE-2026-14171
CVE-2026-14171 affects ads-tec Industrial IT web UI via an unauthenticated remote attacker abusing improper validation of the post-login redirect. This open redirect could mislead users to a malicious site, with potential impacts to confidentiality and availability as described. Root cause: impro...
CVE-2026-14171
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
PT-2026-65564
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...
OPENSUSE-SU-2026:11393-1 logcli-3.7.4-1.1 on GA media
These are all security issues fixed in the logcli-3.7.4-1.1 package on the GA media of openSUSE Tumbleweed...
RHEL 8 : resource-agents (RHSA-2026:47092)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47092 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...
PT-2026-65417
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...