CVE-2026-59303

Spring Cloud Stream contains a vulnerability where the dynamic destination cache size is not properly bounded, affecting versions 5.0.0–5.0.2 , 4.3.0–4.3.3 , and 4.2.0–4.2.6 . The flaw allows an unbounded cache to grow, which could lead to resource exhaustion under specific conditions. The CVSS 3...

cve-2026-16219-croogo-lab

CVE-2026-16219: Croogo FileManager रक्षात्मक प्रयोगशाला यह रिपॉजिटरी Croogo CMS में CVE-2026-16219 के रूप में ट्रैक किए गए पथ-प्राधिकरण दोष का दस्तावेजीकरण करती है और उसे सुरक्षित रूप से प्रदर्शित करती है। यह डिफेंडरों, अनुरक्षकों, छात्रों और शोधकर्ताओं के लिए है जो उन प्रणालियों का परीक्षण कर रह...

CVE-2024-36971

CVE-2024-36971 — प्रूफ़ ऑफ़ कॉन्सेप्ट केवल अनुसंधान और विश्लेषण हेतु ⚠️ अस्वीकरण — इस रिपॉजिटरी का उपयोग करने से पहले पढ़ें यह रिपॉजिटरी केवल रक्षात्मक अनुसंधान, विश्लेषण और जिम्मेदार रिपोर्टिंग के लिए है। इसमें CVE-2024-36971 नामक एक गैर-शोषणीय प्रूफ़ ऑफ़ कॉन्सेप्ट फ़ाइल और प्रभावित क्षेत्र को...

CVE-2026-49097

camel-irc irc.sendTo 头部注入复现工具 CVE-2026-49097 该项目演示了 Apache Camel 的 camel-irc 组件中的一个消息头注入 漏洞，追踪编号为 CVE-2026-49097 。IrcProducer 读取 irc.sendTo 头部以选择出站 IRC 消息的目标；当该头部存在时，会覆盖端点配置的频道列表 ： root@kitploit: // IrcProducer.process 受影响版本 4.18.2 final String sendTo =...

CVE-2024-38063

CVE-2024-38063 PoC | DKob & N3TCR4SH Обзор Этот скрипт является доказательством концепции PoC для эксплуатации CVE-2024-38063. Он генерирует и отправляет вредоносные фрагментированные IPv6-пакеты с определенными опциями назначения для атаки на ядро, что потенциально может вызвать отказ в...

CVE-2026-47861 UDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=false

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 -...

CVE-2026-47861

Spring Integration UDP inbound adapter contains a flaw where the adapter sends an acknowledgment (ack) to a host:port parsed from the packet body, even when acknowledge=false is configured. An unauthenticated remote attacker who can send a single UDP packet to the adapter can cause the server to ...

CVE-2020-15778

CVE-2020-15778 Introduzione Questa repo riproduce CVE-2020-15778. Passaggi 1. Costruisci le immagini docker per il server e il client scp root@kitploit: cd client docker build -t client-cve . root@kitploit: cd server docker build -t server-cve . 2. Avvia il server scp in un container...

CVE-2026-26449

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

CVE-2016-4971

CVE-2016-4971 Bei einer Serverweiterleitung von HTTP zu einer FTP-Ressource vertraut wget dem HTTP-Server und verwendet den Namen in der weitergeleiteten URL als Zieldateinamen. Weitere Details finden Sie in dem Beitrag in meinem Blog. Verwendung Auf Ihrem Server, node wget.js Auf Ihrem...

kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

A flaw was found in the Linux kernel's IPv6 networking implementation, specifically within the seg6 and rpl lwtunnels. A race condition can occur when handling destination cache entries, where a NOREF no reference destination object is used after it has been freed. This use-after-free vulnerabili...

CVE-2026-26449

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

EUVD-2026-66752

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

CVE-2026-26449

Stomper (commit 5e2741e) is vulnerable to a null pointer dereference when a client sends a STOMP SEND frame missing the destination header field. The server crashes while processing the malformed frame, resulting in a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/...

CVE-2026-78638

A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – Vulnerabilità di Iniezione Comandi in OpenSSH SCP Script di Rilevamento Informazioni CVE-2020-15778 è una vulnerabilità di iniezione comandi scoperta nell’utilità scp fornita da OpenSSH versioni ≤ 8.3p1. Il problema consente a un attaccante di eseguire comandi arbitrari sul siste...

EUVD-2026-65301

A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...

CVE-2026-78638 peerigon unzip-crx/unzip-crx-3 Archive Extraction index.js unzip path traversal

A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...

CVE-2026-78638

peerigon unzip-crx and unzip-crx-3 (up to 0.2.0 ) contain a path traversal vulnerability in the unzip function of dist/index.js (Archive Extraction component). Manipulating the destination argument allows writing files outside the intended directory. The attack requires local access with low priv...

CVE-2026-76845

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...