1252059 matches found
CVE-2026-31024
CVE-2026-31024 Report di vulnerabilità: Buffer Overflow basato su stack e divulgazione di informazioni in Steghide Field| Value ---|--- Applicazione target| Steghide Binario Linux Versione interessata| 0.5.1 Confermata; versioni precedenti probabilmente interessate Tipo di vulnerabilità| Buffer...
Eaton-Intelligent-Power-Manager-Local-File-Inclusion
Eaton-Intelligent-Power-Manager-Local-File-Inclusion L'inclusione locale di file in Eaton Intelligent Power Manager v1.6 consente a un attaccante di includere un file, il che può portare alla divulgazione di informazioni sensibili, denial of service ed esecuzione di codice. CVE-2018-12031 Per...
Mitigation-Apache-CVE-2021-41773-
Mitigation-CVE-2021-41773- Script Shell per mitigare CVE-2021-41773, una vulnerabilità di Path Traversal e File Disclosure in Apache Installazione root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Utilizzo Fix completo e modalità consigliata per mitigare la...
CVE-2022-41741-742-Nginx-Vulnerability-Scanner
🛡️ Nginx Vulnerability Scanner Sviluppato da m10sec. Questo script rileva automaticamente la versione di Nginx su un server remoto e valuta se è vulnerabile a falle di sicurezza note, in particolare: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Corruzione della memoria in...
CVE-2026-9491
A Server-Side Request Forgery (SSRF) vulnerability in the webhook component of Synology Chat Server prior to 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information. The CVSS v3.1 score is 4.3 (Medium) with a network attack vector, low complexity, and low privileges requ...
EUVD-2026-67462
A server-ide request forgery SSRF vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information...
CVE-2026-9491
A server-ide request forgery SSRF vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information...
CVE-2021-2471
CVE-2021-2471 - XXE in MySQL Connector/J Sicherheitslücke im MySQL Connectors-Produkt von Oracle MySQL Komponente: Connector/J. Die betroffenen unterstützten Versionen sind 8.0.26 und früher. Erfolgreiche Angriffe auf diese Sicherheitslücke können zu unbefugtem Zugriff auf kritische Daten oder...
PoC-CVE-2000-0649
PoC-CVE-2000-0649 Un piccolo strumento per creare un PoC per CVE-2000-0649. Utilizzo Questo script verifica se il server è vulnerabile a CVE-2000-0649. Tieni presente di provare con HTTP, HTTPS e percorsi diversi. Nella mia esperienza, la divulgazione avviene principalmente quando ci si connette...
CVE-2023-31445-Unprivileged-Information-Disclosure
CVE-2023-31445-Unprivileged-Information-Disclosure Repository enthält die Beschreibung für CVE-2023-31445, entdeckt vom Dodge Industrial Team für die Dodge OPTIFY-Plattform. CVE-ID: CVE-2023-31445 Anbieter: Cassia Networks Produkt: Access Controller Version: Cassia-AC-2.1.1.2203171453...
CVE-2026-80717 sctp: validate Adaptation Indication parameter length
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
CVE-2026-80717 sctp: validate Adaptation Indication parameter length
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
EUVD-2026-67452
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
CVE-2026-80717
CVE-2026-80717 is an information disclosure vulnerability in the Linux kernel SCTP subsystem. The root cause is that sctp_verify_param() accepts a header-only Adaptation Layer Indication parameter because the generic parameter walker only checks for header presence. sctp_process_param() then read...
EUVD-2026-67443
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...
EUVD-2026-67442
In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939sessionfreshnew: initialize receive buffer Zero the allocated buffer in j1939sessionfreshnew to ensure it contains no residual data. While there is a potential performance impact if users allocate...
CVE-2026-80662
CVE-2026-80662 affects the Linux kernel's CXL (Compute Express Link) RAS subsystem . The CXL_HEADERLOG_SIZE constant was defined as 512 bytes , eight times the actual 64-byte on-device Header Log in the CXL r4.0 RAS Capability Structure. This causes header_log_copy() to overrun the 88-byte iomap ...
CVE-2026-80662 cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size
In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...
CVE-2025-24071-POC-NTLMHashDisclosure-
CVE-2025-24071-POC-NTLMHashDisclosure Attiva l'autenticazione SMB automatica verso una condivisione controllata dall'attaccante. Nessuna interazione richiesta — Esplora file di Windows avvia questa autenticazione NTLM automaticamente. Comporta la divulgazione dell'hash NTLMv2 information...