Lucene search
+L

32617 matches found

OSV
OSV
added 2026/01/15 6:10 p.m.11 views

GHSA-J2F3-WQ62-6Q46 @sveltejs/kit has memory amplification DoS vulnerability in Remote Functions binary form deserializer (application/x-sveltekit-formdata)

Summary The experimental form remote function uses a binary data format containing a representation of submitted form data. A specially-crafted payload can cause the server to allocate a large amount of memory, causing DoS via memory exhaustion. Details When a form is submitted to a remote functi...

8.2CVSS7.3AI score0.00548EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/01/15 3:52 p.m.11 views

EUVD-2026-2774

HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables and gain elevated...

8.5CVSS7.1AI score0.00119EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/15 3:52 p.m.5 views

CVE-2021-47761

MilleGPG5 5.7.2 contains a local privilege escalation vulnerability that allows authenticated users to modify service executable files in the MariaDB bin directory. Attackers can replace the mysqld.exe with a malicious executable, which will execute with system privileges when the computer restar...

8.5CVSS5.6AI score0.00099EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/15 6:53 a.m.7 views

CVE-2026-0961

A flaw was found in Wireshark. This vulnerability allows an attacker to trigger a crash in the BLF file parser by providing a specially crafted file. Successful exploitation leads to a denial of service DoS, making the application unavailable to legitimate users. Mitigation To mitigate this issue...

6.5CVSS6.3AI score0.00177EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/15 12:00 a.m.15 views

PT-2026-3151

Name of the Vulnerable Software and Affected Versions SysGauge Server version 7.9.18 Description The software contains an unquoted service path vulnerability in its binary path configuration. This allows local attackers to potentially execute arbitrary code. The vulnerability exists due to the...

8.5CVSS8.2AI score0.00223EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.6 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003224 advisory. Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14,...

7.8CVSS7.3AI score0.10695EPSS
SaveExploits5References17
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003164 advisory. Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14,...

7.8CVSS7.3AI score0.10695EPSS
SaveExploits5References17
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.8 views

ScienceLogic Skylar One Detection

Binary data sciencelogicskylaronedetect.nbin...

7AI score
SaveExploits0References1
OSV
OSV
added 2026/01/14 8:23 p.m.10 views

CVE-2026-0961 Out-of-bounds Write in Wireshark

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

5.5CVSS6.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/14 8:23 p.m.28 views

CVE-2026-0961 Out-of-bounds Write in Wireshark

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

5.5CVSS0.00177EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.6 views

MiracleLinux 3 : kernel-2.6.18-128.18.AXS3 (AXSA:2010-285:05)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-285:05 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

7.8CVSS7.1AI score0.03603EPSS
SaveExploits2References6
RedhatCVE
RedhatCVE
added 2026/01/13 10:53 p.m.10 views

CVE-2025-15504

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

5.5CVSS6.2AI score0.00251EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.10 views

PT-2026-2409

Name of the Vulnerable Software and Affected Versions Cain & Abel version 4.9.56 Description The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious...

8.5CVSS7.3AI score0.00179EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.12 views

Amazon S3 Encryption Client for Java JAR Detection

Binary data s3encryptionclientjavadetect.nbin...

7AI score
SaveExploits0References1
Redos
Redos
added 2026/01/13 12:00 a.m.11 views

ROS-20260113-7313

A vulnerability in the loadelfbinary function of the Linux kernel file system is related to incorrect input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS6.5AI score0.00248EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/12 10:13 a.m.180 views

ethical-hacking-excersises

Exploitation Techniques – Course Exercises Repository Over...

8.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/01/12 12:00 a.m.11 views

YARA-X 1.11.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/12 12:00 a.m.6 views

Gogs Detection

Binary data gogsdetect.nbin...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/12 12:00 a.m.4 views

Gladinet Triofox Agent Installed (Windows)

Binary data gladinettriofoxagentwininstalled.nbin...

7AI score
SaveExploits0References1
Snyk
Snyk
added 2026/01/10 12:40 p.m.7 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the Parser::parsebinary function. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediation A fix was pushed into the master branch but not yet...

5.5CVSS6.4AI score0.00251EPSS
SaveExploits1References2
Rows per page
Query Builder