67632 matches found
CVE-2026-106441
The Hydra framework (versions prior to 1.3.6 and 1.4.0.dev9 ) is vulnerable to unsafe callable resolution due to how it handles Python logging configuration . The root cause is that Hydra passes configurations to logging.config.dictConfig() without applying its target policy to various handler, f...
CVE-2026-106109
Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir before building without rejecting the project root, user home directory, filesystem roots, or symlink-resolved external...
CVE-2026-63270
A flaw was found in LibreOffice. This vulnerability allows information disclosure when a user opens a specially crafted document. An attacker can construct malicious URLs within document features that expand local environment variables or configuration settings, enabling the exfiltration of...
sccmhound
SCCMHound SCCMHound هي أداة تجميع بصيغة C لتقنية BloodHound خاصة بـ Microsoft Configuration Manager MCM. إذا كنت تبحث عن طريقة لجمع معلومات جلسات BloodHound من مستخدمي وأجهزة Configuration Manager، فهذه هي الأداة المناسبة لك! يُوصى بشدة باستيراد البيانات المجموعة مع بيانات جامع آخر SharpHound,...
cs4239-cve-2020-15873
CVE-2020-15873 Proof of Concept of CVE-2020-15873 - Blind SQL Injection in Librenms librenms librenms Development Debugging LibreNMS Docker Instance 1. Obtain a shell to the container: $ sudo docker exec -it librenmsvuln /bin/bash 2. To read the logs generated by LibreNMS: $ tail -f...
CVE-2026-2586
Authenticated GlassFish EL Injection RCE CVE-2026-2586 An Expression Language Injection vulnerability in the GlassFish Administration Console allows an authenticated user to inject malicious EL expressions into parameters processed by the administrative web interface. Successful exploitation may...
CVE-2026-40369
Note NTOKernelBase in exp.cpp needs to be set manually...
CVE-2026-24733
CVE-2026-24733 ما هو CVE-2026-24733؟ تعامل Apache Tomcat بشكل غير صحيح مع طلب HEAD بأسلوب HTTP/0.9 في ظل تكوينات معينة لقيد الأمان. مدقق دفاعي لـ CVE-2026-24733 مدقق أمني بلغة Python خفيف الوزن وخالٍ من التبعيات لـ CVE-2026-24733 ، وهو تجاوز لقيد الأمان في Apache Tomcat عبر طلب HEAD بأسلوب...
BIT-VIRTUALENV-2026-102938 virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write writes prompt values verbatim to the line-oriented pyvenv.cfg format while PyEnvCfg.readvalues parses the file with str.splitlines and accepts the last value for duplicate keys. An attacker wh...
BIT-GRAFANA-2026-81841 Paused shared dashboard access tokens still expose data source configuration
Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...
CVE-2025-7775-PoC
CVE-2025-7775 | NetScaler ADC RCE PoC ⚠️ Disclaimer: This is a hypothetical PoC for educational purposes only.Segment NetScaler networks CVE-2025-7775 does not exist. Use only in an isolated lab. Overview Simulated exploit for a hypothetical unauthenticated RCE in Citrix NetScaler ADC/Gateway...
CVE-2026-98317
In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...
CVE-2026-98304
The Linux kernel contains a vulnerability in the bcmgenet driver where user-configured hardware filters are silently lost during an interface ifup operation. The root cause is that the bcmgenet_hfb_init() function calls INIT_LIST_HEAD() on the priv->rxnfc_list every time bcmgenet_open() is exe...
SUSE-SU-2026:4534-1 Security update for python312
This update for python312 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser...
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override...
CVE-2026-59357 Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions
Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...
CVE-2026-59357 Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions
Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...
EUVD-2026-92989
Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...