240189 matches found
RP_Import_RCE
Real Player 'external::Import' Beliebiges Herunterladen von Dateien, Directory-Traversal-Schwachstellen führen zu Remote Code Execution Video-Demo: https://youtu.be/CONlijEgDLc Real Player nutzt Funktionen von Microsoft Internet Explorer und legt Eigenschaften und Methoden über ein spezielles,...
Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization
Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses tomcat-embed-core-10.1.57, netty-codec-http2-4.2.15.Final.jar, mlflow-3.11.1-py3-none-any.whl, gitpython-3.1.49-py3-none-any.whl, docling-2.91.0-py3-none-any.whl, transformers-5.6.2-py3-none-any.whl, ip-address-10.2.0.tgz, bcutil-jdk18on-1.84.jar,...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses keras-3.14.1, bcprov-jdk18on-1.84.jar, sentencetransformers-5.2.0-py3-none-any.whl, pillow-12.2.0-cp311-cp311-manylinux227x8664.manylinux228x8664.whl, tomcat-embed-core-10.1.55.jar, langgraphsdk-0.3.13-py3-none-any.whl, and transformers-4.57.5-py3-none-any.whl which...
dirtycow
✅ Requisiti / Versione del kernel interessata Dirty COW è una Local Privilege Escalation LPE nel kernel Linux nota come CVE-2016-5195. :contentReferenceoaicite:0index=0 🎯 Kernel vulnerabile In generale, Dirty COW colpisce i kernel Linux dalla 2.x alla 4.x precedenti alla 4.8.3...
RAT-via-Telegram
RAT über Telegram Windows-Fernverwaltungstool über Telegram jetzt in Python 3.7! | Ursprünglich erstellt von Ritiek Warum noch eines? Die derzeitigen Remote-Verwaltungstools auf dem Markt haben zwei Hauptprobleme: Mangel an Verschlüsselung. Erfordern Portweiterleitung, um aus Hunderten von...
HQLmap
HQLMap Questo progetto è stato creato per sfruttare le iniezioni HQL. Lo strumento è stato scritto in Python e rilasciato sotto licenza MIT. Sviluppi futuri: ho in mente di sviluppare un modulo specifico per SQLmap. Dove puoi provare lo strumento? Se vuoi un ambiente vulnerabile veloce dove prova...
Duplicate Advisory: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8mpw-7fpc-4gqj. This link is maintained to preserve external references. Original Description NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows...
GHSA-3M7F-6HXV-6796 Duplicate Advisory: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8mpw-7fpc-4gqj. This link is maintained to preserve external references. Original Description NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows...
Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.323 Vulnerability Details CVEID:CVE-2026-48776 DESCRIPTION: LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python...
CVE-2026-31431-copy-fail
Exploit CVE-2026-31431 Copy Fail Parte 1: Concetto Teorico Come funziona CVE-2026-31431 Invece di recuperare costantemente i file direttamente dal lento disco rigido fisico—il che spreca molto tempo—il sistema Linux crea una copia temporanea del file nella RAM, nota come Page Cache. Ciò consente ...
PYSEC-2026-3752
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
CVE-2026-81725
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
PYSEC-2026-3752
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
DEBIAN-CVE-2026-81725
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
UBUNTU-CVE-2026-81725
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
PYSEC-2026-3776
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
PYSEC-2026-3776
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
CVE-2026-81725
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
CVE-2026-81698
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...