Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

Python-Shellcode-Anydesk-Apc-injection-Remote-IP-Address-Analysis

1.x64dbg – File Operations & JMP Trampolines This x64dbg view reveals that the Python shellcode uses file operations CreateFileW, DeleteFileA/W and JMP trampolines to dynamically call Windows APIs. Key Observations: CreateFileW – Creates or opens a file payload drop. DeleteFileA / DeleteFileW –...

CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...

VulnCheck KEV: CVE-2012-20005

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...

AlmaLinux 9.6 [TuxCare] Security Update: pacemaker / pacemaker-cli / pacemaker-cluster-libs / pacemaker-cts / etc (ALMALINUX9.6:CLSA-2026:1792442836)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792442836 advisory. - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message...

PT-2026-118665

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to...

Linux Distros Unpatched Vulnerability : CVE-2026-98639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: riscv: Fix NACL hfence entry update order The SBI v3.0 specification section 15.1.2 requires a nested HFENCE entry to be populated as follows: 1 find an...

Rocky Linux 9.6 [TuxCare] Security Update: pacemaker / pacemaker-cli / pacemaker-cluster-libs / pacemaker-cts / etc (ALMALINUX9.6:CLSA-2026:1792442836)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792442836 advisory. - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message...

Linux Distros Unpatched Vulnerability : CVE-2026-98569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink,...

Plex Media Server < 1.43.3.10861 Multiple Vulnerabilities

According to its self-reported version, the Plex Media Server installed on the remote host is prior to 1.43.3.10861. It is, therefore, affected by multiple vulnerabilities: - Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The...

AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1791825473)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791825473 advisory. - ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing...

lrzsz security, bug fix, and enhancement update

0.12.20-69 - Fix long-standing SIGSEGV bug when using the -s parameter without an argument RHEL-282106 0.12.20-68 - Backport tightened path handling from 0.13.1 CVE-2026-105840 0.12.20-67 - Remove 'Topipe' feature. CVE-2026-105841...

PT-2026-118241

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequences injected into the uid parameter of the mail/headers and mail/viewsource actions to execute arbitrary IMAP commands...

PT-2026-118584

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 4.33.0 passport-bridge versions prior to 1.6.1 Description Cross-host or cross-locale session migration emits a single-use bearer session token as a URL query parameter. A client that obtains this token before i...

PT-2026-118468

Configurable Reports block for Moodle moodle-block configurablereports before 5.3.1 contains an sql injection vulnerability in report sql::prepare sql via the filter var request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTER VAR%% placeholder can...

PT-2026-120297

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8 and RouterLink directives are rendered with queryParamsHandling: 'merge' or 'preserve', configured either per link or globally via defaultQueryParamsHandling. Starting i...

PT-2026-120311

Summary Apostrophe's cross-domain session migration emits a single-use session token as a URL query parameter and stores it in the Mongo cache. Any client that presents the token silently adopts the target user's full session including passport.user with no credentials. Details...

VulnCheck KEV: CVE-2014-125134

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitiv...

VulnCheck KEV: CVE-2014-125131

DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script ta...

VulnCheck KEV: CVE-2014-125132

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with maliciou...