CGA-4R7Q-XG7V-XJ2R

Bulletin has no description...

CGA-P924-HJJ7-5HHF

Bulletin has no description...

CGA-G3F2-7V32-V9G7

Bulletin has no description...

CGA-W9WH-33QF-XPJR

Bulletin has no description...

CGA-RJPF-9Q27-7QRP

Bulletin has no description...

CGA-QJWV-MR5X-FVV4

Bulletin has no description...

CGA-PXFH-VPRC-397X

Bulletin has no description...

CVE-2025-32433-Remote-Shell

CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-32433 returning a remote bash shell. Heavily inspired by understanding of exploit derived from ProDefense's PoC for CVE-2025-32433. Running the Exploit make exploit.exe is also made available for Windows machines by the cross-compilation...

CGA-R3J2-W28R-4PJ3

Bulletin has no description...

CGA-4XPH-2793-56H4

Bulletin has no description...

CGA-GV3X-4JMX-FRG9

Bulletin has no description...

CGA-23R5-2VM4-JMRF

Bulletin has no description...

CGA-9CJP-PC6Q-6X78

Bulletin has no description...

EUVD-2026-112547

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component Request Forwarder. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be...

EUVD-2026-112500

gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to delete directories outside the password store via ../ entry names in Prune and IsDir. Collaborators with write access to a shared git-synced store can introduce crafted entries,...

CGA-HHVR-XRCP-G3VF

Bulletin has no description...

EUVD-2026-112491

Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in the ZIP, forge administrator tokens, and create...

EUVD-2026-112497

FreeImage danoli3 fork before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing...

EUVD-2026-112492

xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send-message endpoint that allows unauthenticated attackers to send messages from other users' accounts using publicly known default API secrets. Attackers can supply the hard-coded apikey and another...

EUVD-2026-112490

OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader that allows unauthenticated attackers to stall connections by sending payloadlength values above 32750. Attackers can send crafted OVT packets to the OVT listener to hold connections open indefinite...