399061 matches found
Security Bulletin:Multiple vulnerabilities in postgresql may affect IBM Infosphere Change Data Capture (CVE-2026-107314, CVE-2026-107315)
Summary Multiple security vulnerabilities have been identified in postgresql, PostgreSQL JDBC Driver Postgresql. postgresql is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Security Bulletin:Multiple vulnerabilities in netty-codec-http may affect IBM Infosphere Change Data Capture (CVE-2026-93558, CVE-2026-93565, CVE-2026-93566, CVE-2026-93573)
Summary Multiple security vulnerabilities have been identified in netty-codec-http, Netty codec module for encoding and decoding HTTP messages and handling HTTP protocol logic. netty-codec-http is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the...
Security Bulletin:Multiple vulnerabilities in netty-handler-ssl-ocsp may affect IBM Infosphere Change Data Capture (CVE-2026-93493, CVE-2026-93578)
Summary Multiple security vulnerabilities have been identified in netty-handler-ssl-ocsp, Netty/Handler/Ssl/Ocsp. netty-handler-ssl-ocsp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details...
CVE-2026-98902
A flaw was found in the Linux kernel's RAID5 storage driver. A sequence number comparison issue in stripe batch processing fails to account for 32-bit integer wrapping. During extensive storage write operations, the sequence counter may overflow, causing the system to misidentify newer stripe...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding
A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...
CVE-2026-71455
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20...
CVE-2026-72753
The Routinator software contains a vulnerability related to how it handles RRDP notification files . When the software encounters a file with gaps in the delta entries , it incorrectly accepts and parses the data, which may result in missing data . Additionally, processing a file with an excessiv...
CVE-2026-72753 Routinator incorrectly handles delta updates
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory...
EUVD-2026-110026
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory...
CVE-2026-72753
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory...
CVE-2026-72753 Routinator incorrectly handles delta updates
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory...
Nezha Monitoring CVE-2026-53519 JWT forgery
CVE-2026-53519: path traversal under the Nezha dashboard exposes data/config.yaml jwtsecretkey and data/sqlite.db. Forges an HS256 admin JWT and verifies access to /api/v1/profile. !/usr/bin/env python3 -- coding: utf-8 -- """Nezha Monitoring CVE-2026-53519 path traversal + JWT forgery admin...
Adminer CVE-2020-35572 arbitrary file read
CVE-2020-35572 Adminer = 4.6.2: server driver makes Adminer connect outbound to attacker MySQL; LOAD DATA LOCAL INFILE pulls target files. !/usr/bin/env python3 -- coding: utf-8 -- """Adminer CVE-2020-35572 rogue-MySQL LOAD DATA LOCAL file read.""" from future import annotations import re from...
Get Session Storage
Extract all data from sessionStorage on the hooked origin BeEF getsessionstorage from kittysploit import import json class ModuleBrowserAuxiliary: info = "name": "Get Session Storage", "description": "Extract all data from sessionStorage on the hooked origin BeEF getsessionstorage", "author":...
EUVD-2026-109979
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20...
CVE-2026-85297
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later...
CVE-2026-85297
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later...
CVE-2026-115680
Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...
UBUNTU-CVE-2026-116540
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed...
