2227502 matches found
RLSA-2026:64807 Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
redis:7 security update
An update is available for redis, module.redis. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as ...
valkey security, bug fix, and enhancement update
An update is available for valkey. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Valkey is an advanced key-value store. It is often referred to as a data...
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...
RLSA-2026:64812 Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...
RLSA-2026:64824 Important: redis security, bug fix, and enhancement update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
n8n-cve-2025-68613-thm
CVE-2025-68613 – n8n 严重远程代码执行漏洞利用 概述 本仓库记录了对 CVE-2025-68613 CVSS 9.9 的实操利用过程，该漏洞是影响 n8n 工作流自动化平台 （版本 0.211.0 至 1.120.3）的一个严重远程代码执行漏洞。 此次利用在受控的 TryHackMe 实验环境 中 遵循道德规范 执行，仅用于教育目的。 漏洞摘要 字段| 值 ---|--- CVE ID| CVE-2025-68613 CVSS 分数| 9.9（严重） 公开日期| 2025年12月19日 受影响产品| n8n 工作流自动化平台 漏洞类型| 表达式注入 → 沙箱逃逸 →...
CVE-2026-72530-TrueConf-Sandbox-Escape-
CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation & Detection PoC 📌 Descripción General Este repositorio contiene una demostración educativa de la mitigación y detección para CVE-2026-72530 , una vulnerabilidad crítica de Code Injection y Sandbox Escape en TrueConf Server. Contexto de l...
RUSTSEC-2026-0282 Double free in `AlignedBox<[T]>::realloc_with_default` when an element's `Drop` panics
Shrinking an AlignedBox takes ownership of the buffer out of self.container with ManuallyDrop::take, destroys the elements past the new length, and only then commits the new Box back into self.container. ManuallyDrop::take moves ownership but not the bits, so until that commit self.container stil...
Double free in `AlignedBox<[T]>::realloc_with_default` when an element's `Drop` panics
Shrinking an AlignedBox takes ownership of the buffer out of self.container with ManuallyDrop::take, destroys the elements past the new length, and only then commits the new Box back into self.container. ManuallyDrop::take moves ownership but not the bits, so until that commit self.container stil...
CVE-2025-4578
CVE-2025-4578 File Provider = 1.2.3 - Unauthenticated SQL Injection Description The File Provider plugin for WordPress is vulnerable to SQL Injection via the 'fileId' parameter in all versions up to, and including, 1.2.3 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2024-50427
CVE-2024-50427 SurveyJS: Arrastrar y Soltar Creador de Formularios de WordPress = 1.9.136 - Carga Arbitraria de Archivos Autenticada Suscriptor+ Descripción: El plugin SurveyJS: Arrastrar y Soltar Creador de Formularios de WordPress para crear, estilizar e incrustar múltiples formularios de...
Chrome-CVE-2024-2887-RCE-POC
Resumen de Chrome-CVE-2024-2887-RCE-Poc Nombre de la vulnerabilidad: Google Chrome Type Confusion Tipo de amenaza: Ejecución de código Probabilidad de explotación: Alta Estado del POC: Público Estado de explotación en la naturaleza: No público Estado del EXP: Público Estado de los detalles...
CVE-2023-50164
Exploit CVE-2023-50164 for HackTheBox Lab Description This exploit was developed specifically for the Strutted lab from HackTheBox , aiming to exploit the vulnerability CVE-2023-50164 in Apache Struts 2. The flaw allows path traversal through a fault in handling file upload parameters. The exploi...
CVE-2014-0195
XML-RPC WordPress Brute-Force Exploit Script This repository contains a Python-based proof of concept PoC for brute-forcing login credentials on WordPress instances vulnerable to CVE-2014-0195, where the XML-RPC system.multicall function can be exploited to attempt multiple login requests in a...
Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.
Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks. Simulación del ataque de la vulnerabilidad Zerologon CVE-2020-1472 en Active Directory en Windows Server 2016 y el uso de la solución Trend Micro Deep Security para prevenir dichos ataques. La vulnerabilidad Zerologon es una...
asterion-network-minotaur
Auditor ético de seguridad de red: más de 50 comprobaciones en SMB, RDP, LDAP, SSH, Kerberos y más, con análisis de CVE impulsado por IA y mapeo de cumplimiento OWASP/CIS/NIST. Inicio rápido · Documentación · Docker · Funciones de IA · Dar estrella en GitHub En acción !Asterion — salida de escane...
CVE-2025-26794
CVE-2025-26794: Blind SQL injection in Exim 4.98 SQLite DBM - exploit writeup Exim report: https://www.exim.org/static/doc/security/CVE-2025-26794.txt I discovered this vulnerability through a manual code review. Vulnerability details: Issue The SQL parameters, when SQLite is used as the DBM, are...
CVE-2024-22514-Remote-Code-Execution
CVE-2024-22514: Ejecución Remota de Código en Agent DVR Información Descripción iSpyConnect.com Agent DVR 5.1.6.0 contiene una vulnerabilidad que permite redirigir el archivo activado por comandos de alerta. La modificación puede permitir que la función de comandos active cualquier archivo en el...