Lucene search
+L

8386 matches found

Kitploit
Kitploit
•added 2026/09/28 12:51 p.m.•18 views

itscape

ITScape —— Linux KVM/arm64 客户机到宿主机(guest-to-host)逃逸追踪站点 ITScape 补丁状态追踪器的源码:一个单页站点,用于记录哪些发行版已为 Linux 内核中的 KVM/arm64 客户机到宿主机(guest-to-host)逃逸漏洞发布了修复。 事实数据所在 关于该漏洞的全部信息——CVE ID、受影响与已修复版本、上游修复提交、发现与披露致谢,以及各发行版的最终补丁状态——均归属于追踪页面,而非本 README: 渲染页面: https://kimmo.cloud/itscape/ 源码: site/content/index.md...

6.3AI score
SaveExploits0References3
Redos
Redos
•added 2026/09/28 12:00 a.m.•7 views

ROS-20260928-73-0125

The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...

7.3AI score0.00207EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•11 views

The vulnerability of the `SslClientHelloHandler.decode()` function in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to induce a service failure.

The vulnerability of the SslClientHelloHandler.decode function in the framework for developing network applications, servers, and clients using the Netty protocol is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.01576EPSS
SaveExploits0References26Affected Software14
Kitploit
Kitploit
•added 2026/09/27 4:17 p.m.•10 views

CVE-2020-3187

徽章 许可证 MIT 安装 1. 安装 Python3 和 pip 操作说明(如果你连这个都不会,那你真的不该用这个工具) 通过 pip 安装 pip install CVE-2020-3187 运行以下命令检查 CVE-2020-3187 -h 配置 2. 我们集成了 Telegram API,以便在检测到漏洞时接收即时通知。 Telegram 通知 CVE-2020-3187 --chatid 打开你的 Telegram,搜索 @CappricioSecuritiesToolsbot 并点击开始 使用 3. 该工具有多种使用场景。 检查单个 URL CVE-2020-3187 -u...

9.1CVSS8.2AI score0.96595EPSS
SaveExploits4References2
BDU FSTEC
BDU FSTEC
•added 2026/09/25 12:00 a.m.•7 views

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely, allowing a hacker to cause service failures.

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.3CVSS6.4AI score0.00399EPSS
SaveExploits0References10Affected Software13
OPENSUSE Linux
OPENSUSE Linux
•added 2026/09/24 12:00 a.m.•11 views

Security update for distribution (important)

openSUSE security update: security update for distribution ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21898-1 Rating: important References: bsc1268884 bsc1276677 bsc1277966 bsc1278997 bsc1279219 bsc1279316 Cross-References: CVE-2026-37236...

9.1CVSS6AI score0.00641EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•12 views

Fedora 46 : docker-distribution (2026-a5209e3552)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5209e3552 advisory. Automatic update for docker-distribution-3.1.2-1.fc46. Changelog Thu Sep 24 2026 Bradley G Smith - 3.1.2-1 - Update to release v3.1.2 - Resolves:...

5.3CVSS6AI score0.00336EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/24 12:00 a.m.•7 views

OPENSUSE-SU-2026:11872-1 distribution-registry-3.1.1-8.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-8.1 package on the GA media of openSUSE Tumbleweed...

6.3CVSS5.9AI score0.00383EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/23 12:00 a.m.•11 views

ROS-20260923-73-0059

The vulnerability of the unregisternvdimmpmu function in the drivers/nvdimm/ndperf.c module of the Linux operating system’s memory device drivers related to the distribution of resources without restrictions and regulation. Exploiting this vulnerability could allow an attacker to compromise the...

7.3AI score0.00214EPSS
SaveExploits0
NVD
NVD
•added 2026/09/22 8:17 p.m.•28 views

CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

8.4CVSS0.00125EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/22 7:17 p.m.•57 views

CVE-2026-89281 CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

0.00125EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:17 p.m.•11 views

EUVD-2026-84681

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

6.2AI score0.00125EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 7:17 p.m.•34 views

CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build is affected by a hardcoded configuration path vulnerability specifically within the openssl.cnf path. This security flaw can lead to local code execution . No specific remediation, exploit links, or versions are provided in the do...

8.4CVSS6.2AI score0.00125EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:17 p.m.•17 views

EUVD-2026-84680

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

5.9AI score0.00268EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 2:06 p.m.•9 views

EUVD-2026-84407

In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the lookup condition, without applying the report's own distribution/ACL constraints. Because MISP reports carry an...

5.3CVSS5.8AI score0.00389EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/22 2:06 p.m.•36 views

CVE-2026-95683 MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the lookup condition, without applying the report's own distribution/ACL constraints. Because MISP reports carry an...

5.3CVSS0.00389EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•5 views

CVE-2026-95683: Missing Authorization

In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the lookup condition, without applying the report's own distribution/ACL constraints. Because MISP reports carry an...

5.3CVSS5.8AI score0.00389EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•4 views

CVE-2026-89281: Incorrect Permission Assignment for Critical Resource

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

8.4CVSS6.2AI score0.00125EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•5 views

CVE-2026-89282: Incorrect Permission Assignment for Critical Resource

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

9.1CVSS5.9AI score0.00268EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/22 12:00 a.m.•9 views

ROS-20260922-73-0007

The vulnerability in gstreamer1-plugins-good is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.5CVSS7.4AI score0.00961EPSS
SaveExploits0
Rows per page
Query Builder