CVE-2006-20001

CVE-2006-20001 一个精心构造的 If: 请求头可能导致在池（堆）内存中超出发送的头部值的位置发生内存读取或写入单个零字节。这可能导致进程崩溃。此问题影响 Apache HTTP Server 2.4.54 及更早版本。 认证| 复杂度| 向量 ---|---|--- 不可用| 不可用| 不可用 机密性| 完整性| 可用性 ---|---|--- 不可用| 不可用| 不可用 CVSS 评分：不可用 参考资料 https://httpd.apache.org/security/vulnerabilities24.html Brut 文件 CVE-2006-20001.json...

CVE-2026-26084

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...

CVE-2026-61410

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...

CVE-2026-61410

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...

PT-2026-86754

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...

CVE-2017-7529

CVE-2017-7529 描述 自 0.5.6 起至 1.13.2（含）的 Nginx 版本在 nginx 范围过滤器模块中存在整数溢出漏洞，由特制请求触发，可导致潜在敏感信息泄露。 来源：https://nvd.nist.gov/vuln/detail/CVE-2017-7529 Nginx + Flask 示例 在其他开源资料中，你可能会看到该漏洞只能在 Apache2 上且仅针对图片文件复现的说法，但事实并非如此。该漏洞适用于任何通过 Nginx 代理的应用程序。关键在于服务器返回 Accept-Ranges: bytes 响应头。可以手动将其添加到 nginx...

westone-CVE-2021-21972-scanner

westone-CVE-2021-21972-scanner VMware vCenter Server 远程代码执行漏洞。恶意攻击者可以访问 443 端口，向 vCenter Server 发送精心构造的请求，最终导致远程任意代码执行。 安装与使用 git clone https://github.com/Osyanina/westone-CVE-2021-21972-scanner.git cd westone-CVE-2021-21972-scanner cmd CVE-2021-21972.exe 修复建议 将 vCenter Server 7.0 版本升级到 7.0.U1c 将...

CVE-2024-25169-Mezzanine-v6.0.0

产品：Mezzanine CMS 版本：v6.0.0 发现日期：2024年1月10日。 报告日期：2024年1月10日。 漏洞类型：不正确的访问控制。 CVE ID：CVE-2024-25169 描述：Mezzanine v6.0.0中的一个问题允许攻击者通过精心构造的请求绕过管理面板中的访问控制机制。 POC即将推出:...

CVE-2019-20367

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:45+00:00| seen| https://t.me/hackingAttack/49652 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45703 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49652 2026-09-02 01:02:04+00:00| seen|...

CVE-2022-40087

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71968 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:35+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:36+00:00| seen|...

CVE-2026-19472 Rockwell Automation ArmorStart® LT Denial Of Service

A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability...

PT-2026-84166

Name of the Vulnerable Software and Affected Versions ArmorStart® LT affected versions not specified Description A denial-of-service issue exists in the embedded web server due to improper handling of a specially crafted HTTP PUT request. This flaw can lead to a loss of web server availability...

CVE-2026-78618

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request...

CVE-2026-30057

An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...

CVE-2026-30057

free5gc v4.1.0 , an open-source 5G core network implementation, contains a Denial of Service (DoS) vulnerability in the CreateUEContext handler component. An unauthenticated remote attacker can supply a crafted request to trigger the DoS, as reflected by the CVSS 3.1 score of 7.5 (High) with a ne...

EUVD-2026-67108

An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...

CVE-2026-30057

An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...

CVE-2025-61162

Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...

CVE-2025-61162

Cohere North AI v1.1.5 is affected by an incorrect access control flaw in the /api/internal/v1/users/{{USER_ID}} endpoint, which allows an unauthenticated, remote attacker to arbitrarily overwrite user information via a crafted request. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network atta...

CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...