Lucene search
+L

1417 matches found

Kitploit
Kitploit
•added 2026/10/04 7:40 a.m.•54 views

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

6.2AI score
SaveExploits0References3
NVD
NVD
•added 2026/10/02 9:16 a.m.•5 views

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS0.00174EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/02 9:05 a.m.•41 views

CVE-2026-95512 Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS0.00174EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/02 9:05 a.m.•10 views

CVE-2026-95512

A flaw exists in the FreeType library, specifically within its CID font loader . A remote attacker could exploit this by tricking a user into opening content containing a specially crafted CID-keyed font . This font can trigger repeated allocations and decryptions of subroutine data across multip...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/02 9:05 a.m.•8 views

EUVD-2026-91327

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References4
OSV
OSV
•added 2026/10/02 9:05 a.m.•3 views

CVE-2026-95512 Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS5.9AI score
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/10/02 9:05 a.m.•3 views

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/10/02 9:05 a.m.•5 views

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References4
OSV
OSV
•added 2026/10/02 12:00 a.m.•3 views

UBUNTU-CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/10/02 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2026-95512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening conten...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/02 12:00 a.m.•4 views

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

5.5CVSS5.7AI score0.00174EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/01 4:21 p.m.•9 views

CVE-2026-22016-IPFS-CID-Spoofing-via-Multihash-Length-Extension

CVE-2026-22016 – IPFS CID Spoofing via Multihash Length Extension Program Code Python ipfscidspoof.py - Generates a CID with a different multihash length import multihash, cid Attacker creates a file whose hash, when truncated, matches a different file's prefix originalcontent = b"hello"...

7.5CVSS7.7AI score0.00702EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•10 views

Astra Linux – Vulnerability in Linux

In the Linux kernel before version 5.12.4, the net/bluetooth/hcievent.c file contains a use-after-free issue when destroying an hcichan, specifically related to CID-5c4c8c954409. This issue results in the writing of an arbitrary value...

7.8CVSS7AI score0.00819EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Linux

In the Linux kernel, from drivers/block/nbd.c up to version 5.10.12, there is a use-after-free in the nbdaddsocket function. This issue could be triggered by local attackers who have access to the nbd device. The attack occurs during I/O requests at a certain point in device setup, specifically...

7CVSS6.8AI score0.00261EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Linux

The vgacon subsystem in the Linux kernel before version 5.8.10 mishandles software scrollback operations. There is an out-of-bounds read in vgaconscrolldelta, also known as CID-973c096f6a85...

5.9CVSS6.6AI score0.00519EPSS
SaveExploits1References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel, specifically with versions up to 5.9.1, when used with Xen in versions up to 4.14.x. Users of guest operating systems may experience a denial of service where the host operating system hangs due to a high rate of events affecting dom0, also known as...

5.5CVSS6.2AI score0.00415EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/14 10:21 a.m.•18 views

kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp

A flaw was found in the Bluetooth L2CAP Logical Link Control and Adaptation Protocol component of the Linux kernel. When a device receives a connection response with an already-assigned destination Channel Identifier CID, the system may crash. This occurs because the kernel's procedure for...

8.8CVSS5.9AI score0.00354EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•1 views

CVE-2026-81901: Missing Authorization

In Concrete CMS 9.2.0 through 9.5.2, the REST API page update endpoint PUT /ccm/api/1.0/pages/cID did not enforce page-property, page-template, or page-type authorization. A user granted only content-editing rights on a page could therefore alter its properties, template, and type through the API...

8.7CVSS5.8AI score0.00383EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/08 1:08 p.m.•10 views

kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp

A flaw was found in the Bluetooth L2CAP Logical Link Control and Adaptation Protocol component of the Linux kernel. When a device receives a connection response with an already-assigned destination Channel Identifier CID, the system may crash. This occurs because the kernel's procedure for...

8.8CVSS5.9AI score0.00354EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/03 1:06 p.m.•12 views

CVE-2026-78080

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors...

9.3CVSS0.00386EPSS
SaveExploits0References1
Rows per page
Query Builder