3561 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-14199
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled syncttl greater than zero are affected. The Auth Proxy cache key...
Heartbleed
The Heartbleed test server. With caching by Mozilla. Install the SAMPLE.aws-config.json as /.aws-config.json or /etc/aws-config.json or in a path specified by the GODYNAMOCONFFILE env var. root@kitploit: Usage: HBserver --redir-host= --listen= --expiry= HBserver -h | --help HBserver --version...
jwt-reauth
JWT Re-auth यह Burp प्लगइन एक "auth" URL से प्रमाणीकरण टोकन कैश करता है, और फिर उन्हें एक निश्चित scope पर जाने वाले सभी अनुरोधों में हेडर के रूप में जोड़ देता है। विशेषताएँ प्लगइन विभिन्न मेनू में उपलब्ध कॉन्टेक्स्ट मेनू के माध्यम से सेटिंग्स को भेजने की अनुमति देता है। इसमें नए प्रमाणीकरण टोकन...
qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...
CVE-2026-14666
A flaw in PostgreSQL allows users to bypass row-level security RLS due to incomplete tracking of user role and database ownership changes. Active sessions may continue using cached, outdated security policies, enabling unauthorized read or write access to data. Exploitation requires the attacker ...
dompdf-rce
Exploit RCE pour dompdf Ce dépôt contient une application de démonstration vulnérable utilisant dompdf 1.2.0 ainsi qu'un exploit qui permet l'exécution de code à distance via un fichier polyglotte ttf+php. Pour plus de détails, veuillez consulter https://positive.security/blog/dompdf-rce...
After Veeam ONE 13.1.0.7034 Upgrade: No connection could be made because the target machine actively refused it. (localhost:2743)
Article Applicability The issue described in this article only occurs for deployments in which Veeam ONE was installed to a folder other than the default C:\Program Files\Veeam\Veeam ONE\ path. Challenge After Veeam ONE is upgraded to version 13.1 build 13.1.0.7034, reports cannot be generated an...
CVE-2026-14199
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled syncttl greater than zero are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An...
EUVD-2026-70198
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled syncttl greater than zero are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An...
PT-2026-84754
Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description Self-managed instances using Auth Proxy authentication with identity caching enabled where sync ttl is greater than zero are susceptible to an authentication bypass. The issue occurs because...
PT-2026-84658
Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description When using the wolfSSL backend with CA caching enabled, a flaw exists where the CURLOPT SSL CTX FUNCTION callback can be overridden. If this callback replaces the trust store, libcurl may...
CVE-2024-45337
Proof of Concept exploit for CVE-2024-45337 This repository contains a proof of concept exploit for CVE-2024-45337. It can be used to wrap ssh when interacting with an SSH server which is implemented using golang.org/x/crypto = v0.30.0. while caching permissions in the...
httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash
A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...
CVE-2023-37941
Exploitation of Pickle RCE within Superset's Default Cache Information root@kitploit: Author Dinis Cruz Project Superset Description Apache's superset presents different options for caching, all of which based on Flask-Caching. A built-in cache is provided which serializes values for later...
proxy v0.7.0
git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...
CVE-2021-33026
CVE-2021-33026 Pickle Serialization Remote Code Execution - Memcached Poisoning PoC Exploit What's CVE-2021-3306? "The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains...
CVE-2024-46982
Next.js कैश विषाक्तीकरण शोषण यह उपकरण CVE-2024-46982 का पता लगाने और शोषण करने को स्वचालित करता है, जो Next.js में एक कैश विषाक्तीकरण भेद्यता है, जहाँ सर्वर-साइड रेंडरिंग SSR प्रतिक्रियाओं को गलत तरीके से स्थैतिक साइट जनरेशन SSG के रूप में कैश किया जा सकता है । इस गलत कॉन्फ़िगरेशन से स्टोर्ड XSS,...
CVE-2026-27384
CVE-2026-27384 CVE-2026-27384 — ماسح RCE عبر mfunc/eval في W3 Total Cache الإضافة: W3 Total Cache Slug الإضافة: w3-total-cache معرف CVE: CVE-2026-27384 درجة CVSS: 9.8 حرجة متجه CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H نوع الثغرة: تنفيذ تعليمات برمجية عشوائية غير موثّق حقن كود عبر eval...
SUSE CVE-2026-63074
Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...