tomcat85-check

tomcat85-check Still running Tomcat 8.5? This tool tells you exactly which 2025 CVEs you're affected by — because on this question, you can't get a complete answer from the official page, NVD, or scanners. Zero-dependency single jar, runs offline, no network, uploads nothing. What it solves Tomca...

msxml4-remediation

Устранение уязвимостей MSXML 4.0 PowerShell Скрипт PowerShell для устранения проблем безопасности, связанных с Microsoft XML Core Services MSXML 4.0 , который не поддерживается и часто отмечается сканерами уязвимостей. Этот скрипт отменяет регистрацию .dll-файлов MSXML 4 и переименовывает их. Это...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == 문제 고객이 EOL지원 종료된 오래된 CentOS7 박스를 보유하고 있습니다. CentOS7은 link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712에 의해 영향을 받는 이전 openssl을 실행 중입니다. 오래된 CentOS7의 openssl을 CVE에 대해 어떻게 패치해야 합니까? == 단계 1. link:./docs/1.CVE-2021-3712-analysis.adocNVD, CVSS/EPSS 점수 및 CISA KEV...

jetty-line-check

jetty-line-check Which of these six 2026 CVEs has your Jetty or the Jetty pulled in by Spring Boot been hit by — and does the version the official guidance tells you to upgrade to actually exist on Maven Central? The headline is CVE-2026-2332 GHSA-355h-qmc2-wpwf, high / CVSS v3 7.4: chunked reque...

BIT-DOTNET-2025-36854 EOL ASP.NET 6.0 Remote Code Execution Vulnerability

A vulnerability CVE-2024-38229 https://www.cve.org/CVERecord exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution. Per CWE-416: Use After Free...

EUVD-2026-68911

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

Exploit for CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injec...

PT-2026-57531

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub 42026C of the file /goform/tools ddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched...

CVE-2026-10179: Stack-based Buffer Overflow

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument webpage causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

[SECURITY] [DLA 4548-1] distro-info-data database update

Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 25, 2026 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u11 This is a routine update of the distro-info-data database for Debian LTS users. It updates t...

Debian dla-4548 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4548 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview UmbracoForms is a tool that makes creating contact forms, entry forms and questionnaires just as easy as using Word. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the dynamic SOAP client generation...

CVE-2025-15257: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The...

EUVD-2017-16965

Malware in sbrugna...

EUVD-2024-51082

Malicious code in bioql PyPI...

EUVD-2025-12381

Malicious code in bioql PyPI...

EUVD-2022-32839

Malicious code in bioql PyPI...

EUVD-2024-0512

Malicious code in bioql PyPI...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the msdia140.dll process. An attacker can execute arbitrary code by supplying specially crafted input that triggers an integer overflow and subsequent heap-bas...

CVE-2025-36855

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...