203393 matches found
sharesniffer
sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...
ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...
whatportis
whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...
CVE-2026-92697
The FastNetMon DDoS detector and sensor (version 1.2.9 and earlier ) is vulnerable to a remote out-of-bounds read via the NetFlow v9 collector. The root cause is the use of strlen() on an attacker-controlled interface-description field without bounding the scan to the field's declared length. If ...
DEBIAN-CVE-2026-62268
Bulletin has no description...
CVE-2026-54140
The OpenHuman agent harness (desktop application and Rust library) is vulnerable to MCP tool description injection prior to version 0.57.13 . The application fails to neutralize or bound names, descriptions, titles, and parameter definitions returned by external MCP servers when placing them into...
wave-share
wave-share A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon...
Ghidra_v810_v830
Ghidra processor description module for NEC/Renesas v810 and v830 families These modules were made by taking the v850 modules that come with Ghidra as a template and rewriting them to work with v810 and v830 family instructions. 1. V810 description based on User’s Manual: V810 Architecture link 2...
WordPress Simple Download Monitor plugin < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure vulnerability
Contributor+ Private Download Item Title and Description Disclosure vulnerability discovered by Aaron in WordPress Plugin Simple Download Monitor versions 4.1.3...
DEBIAN-CVE-2026-54161
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify, asyncnotify, and wall. Whe...
DEBIAN-CVE-2026-65165
NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation...
DEBIAN-CVE-2026-65139
NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution...
DEBIAN-CVE-2026-65108
Bulletin has no description...
DEBIAN-CVE-2026-65138
Bulletin has no description...
DEBIAN-CVE-2026-65107
NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path they would not normally have access to...
DEBIAN-CVE-2026-65140
NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator...
CVE-2021-42664
CVE-2021-42664 CVE-2021-42664 - Stored Cross-Site Scripting vulnerability in the Engineers online portal system. Technical description: A stored XSS vulnerability exists in the Engineers online portal system. An attacker can leverage this vulnerability in order to run javascript on the web server...
CVE-2025-45778
CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...
poc-cve-xss-inventory-press-plugin
Update - 6-23-2023 The CVE-2023-2579 ID was reserved and the PoC was published in the WPScan website: https://wpscan.com/vulnerability/3cfcb8cc-9c4f-409c-934f-9f3f043de6fe Details Title: Authenticated Reflected Cross-Site Scripting in InventoryPress Plugin for WordPress CMS Date: 2023-04-21 Autho...