CVE-2024-35176

CVE-2024-35176 CVE-2024-35176 poc completo...

CVE-2026-80667

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller that queued the work and waited on mpesww-comp would block indefinitely...

EUVD-2026-67543

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller that queued the work and waited on mpesww-comp would block indefinitely...

CVE-2026-80667

CVE-2026-80667 affects the Linux kernel's mlx5 driver (used by Mellanox/NVIDIA ConnectX network adapters), specifically the LAG (Link Aggregation Group) and MPESW (Multi-Packet Steering) subsystem. The root cause is that mlx5_mpesw_work() could return without calling complete() when mlx5_lag_get_...

CVE-2026-80667

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller that queued the work and waited on mpesww-comp would block indefinitely...

Complete Online Job Search System 1.0 - SQL Injection

Complete Online Job Search System 1.0 contains a SQL injection vulnerability via /eris/index.php?q=hiring&search=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Complete Online Job Search System 1.0 - SQL Injection

Complete Online Job Search System 1.0 contains a SQL injection vulnerability via /eris/admin/company/index.php?view=edit&id=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site...

By-Poloss..-..CVE-2026-18080

CVE-2026-18080 — ERP Complete HR, Accounting & CRM Suite = 1.17.7 Upload Arbitrário de Arquivo Não Autenticado via Anexo de E-mail do CRM Email Connect Path Traversal → RCE...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : Kritische Remote-Authentifizierungsumgehung in GNU InetUtils telnetd 🧠 Überblick CVE-2026-24061 ist eine kritische Schwachstelle, die den telnetd-Dienst in GNU InetUtils betrifft. Sie ermöglicht einem nicht authentifizierten Remote-Angreifer, sich als root anzumelden, indem ein...

OpenTAXII

OpenTAXII Implementazione del server TAXII in Python di EclecticIQ. OpenTAXII è una robusta implementazione Python dei servizi TAXII che offre un ricco set di funzionalità e un'API pythonica e intuitiva costruita su un'applicazione ben progettata. OpenTAXII è garantito compatibile con Cabby, la...

CVE-2021-22986

Воздействие уязвимости Эта уязвимость позволяет неаутентифицированным злоумышленникам, имеющим сетевой доступ к интерфейсу iControl REST через интерфейс управления BIG-IP и собственные IP-адреса, выполнять произвольные системные команды, создавать или удалять файлы, а также отключать службы. Данн...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking the skb structure. Upon an error, the ieee802154xmitcomplete helper function is not called. Only ieee802154wakequeue is called manually. As a result, the skb structure is leaked. Lease the sk...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation...

vulnerabilities present in Oracle Java SE

Oracle has identified vulnerabilities in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. These vulnerabilities affect several supported versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthorized attacker with network...

CVE-2026-70995

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2026-77640

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

VulnCheck KEV: CVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

CVE-2026-68353

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware nummsg in TX complete handler The firmware-controlled nummsg field u8, 0-255 drives the loop in ath6klwmitxcompleteeventrx without validation against the buffer length. This allows...

CVE-2026-68237

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes fences of MAPPED queues. A queue in any other state e.g. mid-eviction keeps its lastfence pending; after a GPU reset that fence never...