CVE-2026-84830 OS command injection in privileged configuration handling

SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges...

CVE-2026-84830

SEPPmail Secure Email Gateway versions before 15.0.7 are affected by an OS command injection vulnerability in privileged configuration handling. An authenticated administrator can exploit this flaw to execute commands with elevated privileges, resulting in high impact to confidentiality, integrit...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 は、Ivanti Connect Secure で見つかった重大な脆弱性であり、バッファオーバーフローを悪用したリモートコマンド実行 RCE を可能にします。 この脆弱性により、攻撃者は悪意のあるファイル（例：Web シェル）をアップロードし、昇格した特権でターゲットシステム上でコマンドを実行できます。 悪用のリスクを軽減するために、影響を受けるシステムを最新バージョンに更新することを強く推奨します。 Web シェルのアップロード ターゲットシステムに Web...

LolDriverScan

LolDriverScan LolDriverScan は、システム上の脆弱なドライバーを発見できる Go 言語製のツールです。 このツールは loldrivers.io のリストを API から取得し、脆弱なドライバーがないかシステムをスキャンします。 このプロジェクトは Go で実装されており、実行に昇格された権限は必要ありません。 機能 脆弱なドライバーのシステムスキャン 詳細情報を表示する詳細出力モード 他のツールとの連携を容易にする JSON 出力に対応 昇格された権限は不要 インストール リリース 最新の自動生成リリースバイナリは GitHub Releases...

CVE-2024-21388

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我々は、テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰宅するまで決して休みません。あなたも彼らを家に連れ戻す手助けができます。https://stories.bringthemhomenow.net/ Microsoft Edge 脆弱性エクスプロイト CVE-2024-21388 このPythonスクリプトは、Microsoft...

CVE-2024-40635_POC

CVE-2024-40635POC CVE-2024-40635 漏洞的概念验证代码 数据来源：https://nvd.nist.gov/vuln/detail/CVE-2024-40635 1. 导入 Docker 库 root@kitploit: import docker 这将导入 Python 的 docker 库，允许通过其 API 与 Docker 交互。如果尚未安装该库，可以通过运行以下命令添加： root@kitploit: pip install docker 2. 初始化 Docker 客户端 root@kitploit: client =...

CVE-2026-73750

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2026-73749

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

EUVD-2026-69613

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

CVE-2026-73749 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

AZL-98448 CVE-2026-56143 affecting package rubygem-elasticsearch 8.9.0-1

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-56143

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-17203

IBM Application Runtime Expert (ARE) for IBM i version V1R1M0 is vulnerable to improper authentication enforcement (CWE-287), allowing a remote authenticated attacker to obtain sensitive information. The CVSS 3.1 score is 7.5 (HIGH) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, in...

CVE-2026-57910

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

CVE-2026-57910 WatchGuard Agent improper authentication allows unauthenticated remote code execution

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

EUVD-2026-65438

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

CVE-2026-57910

CVE-2026-57910 affects the WatchGuard Agent , where an improper authentication flaw allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges . The vulnerability is rated CVSS 4.0: 9.3 (CRITICAL) , with a network attack vector, lo...

PT-2026-81270

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

Astra Linux – Vulnerability in busybox

A flaw was discovered in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by creating a malicious tar archive containing unvalidated hardlink or symlink entries. If the tar archive is extracted with elevated privileges, this flaw can lead...