19943 matches found
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...
Malicious code in @crysnovax/baileys (npm)
@crysnovax/baileys is a renamed fork of the Baileys WhatsApp Web library. On every successful connection connection.update with connection === 'open', wired in lib/Socket/socket.js it silently makes the user's own authenticated WhatsApp account follow two channels controlled by the publisher,...
CVE-2026-85156
WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...
CVE-2025-68935
creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...
CVE-2025-68936
creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...
CVE-2026-41030
creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...
EUVD-2026-70391
WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...
CVE-2026-85156
WWBN AVideo has a broken access control vulnerability on its public channel page. The root cause involves hardcoded visibility flags and an undefined property that fail to properly validate access controls, allowing unauthenticated visitors to view unlisted and group-restricted videos—including f...
CVE-2026-85156 WWBN AVideo Broken Access Control via Channel Page
WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...
CVE-2026-85156 WWBN AVideo Broken Access Control via Channel Page
WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...
next88
next88 - React Server Components RCE Scanner High-performance Go implementation for detecting React Server Components RCE vulnerabilities CVE-2025-55182 & CVE-2025-66478. Features 🚀 High Performance : Compiled Go binary with goroutine-based concurrency 🔍 Multiple Detection Methods : Safe...
CVE-2026-42167-Exploit
Herramienta Maestra de Explotación CVE-2026-42167 Una herramienta profesional de investigación de seguridad para explotar la vulnerabilidad CVE-2026-42167 en el módulo modsql de ProFTPD. Esta herramienta realiza inyección SQL no autenticada para extraer archivos sensibles del servidor mediante...
copy.fail-mitigation-MLM
Crear un nuevo canal de configuración State Channel en Multi-Linux Manager usando el código del archivo copy-fail.sls. Asigna el canal de configuración a todas tus máquinas y ejecútalo, o ejecuta Highstate. ¡Esto es una solución temporal!...
CVE-2026-78662
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
CVE-2026-56855
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
UBUNTU-CVE-2026-78662
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
UBUNTU-CVE-2026-56855
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
Linux Distros Unpatched Vulnerability : CVE-2026-84308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php...
CVE-2025-6792
Exploit: Unauthorized Pusher Channel Subscription Eavesdropping 1 Obtain Pusher credentials from browser console root@kitploit: console.log window.wpguppyscriptsvars.pusherKey, window.wpguppyscriptsvars.pusherCluster ; 2 Subscribe to a victim’s private channel root@kitploit: Pusher Eavesdrop Test...