tomcat85-check

tomcat85-check Still running Tomcat 8.5? This tool tells you exactly which 2025 CVEs you're affected by — because on this question, you can't get a complete answer from the official page, NVD, or scanners. Zero-dependency single jar, runs offline, no network, uploads nothing. What it solves Tomca...

msxml4-remediation

Corrección de MSXML 4.0 PowerShell Script de PowerShell para remediar hallazgos de seguridad relacionados con Microsoft XML Core Services MSXML 4.0 , que no es compatible y suele ser marcado por los escáneres de vulnerabilidades. Este script que hice anula el registro de los archivos .dll de MSXM...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == 问题 客户有一台旧的 CentOS7 机器，已到达生命周期终点（EOL） CentOS7 运行的是较旧版本的 openssl，该版本受 link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 的影响 如何为旧的 CentOS7 上的 openssl 打补丁以修复该 CVE？ == 步骤 1. link:./docs/1.CVE-2021-3712-analysis.adoc使用 NVD、CVSS/EPSS 评分和 CISA KEV 数据对 CVE/漏洞进行分类 2...

jetty-line-check

jetty-line-check Which of these six 2026 CVEs has your Jetty or the Jetty pulled in by Spring Boot been hit by — and does the version the official guidance tells you to upgrade to actually exist on Maven Central? The headline is CVE-2026-2332 GHSA-355h-qmc2-wpwf, high / CVSS v3 7.4: chunked reque...

BIT-DOTNET-2025-36854 EOL ASP.NET 6.0 Remote Code Execution Vulnerability

A vulnerability CVE-2024-38229 https://www.cve.org/CVERecord exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution. Per CWE-416: Use After Free...

EUVD-2026-68911

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

Exploit for CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injec...

PT-2026-57531

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub 42026C of the file /goform/tools ddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched...

CVE-2026-10179: Stack-based Buffer Overflow

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument webpage causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

[SECURITY] [DLA 4548-1] distro-info-data database update

Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 25, 2026 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u11 This is a routine update of the distro-info-data database for Debian LTS users. It updates t...

Debian dla-4548 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4548 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview UmbracoForms is a tool that makes creating contact forms, entry forms and questionnaires just as easy as using Word. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the dynamic SOAP client generation...

CVE-2025-15257: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The...

EUVD-2017-16965

Malware in sbrugna...

EUVD-2024-51082

Malicious code in bioql PyPI...

EUVD-2025-12381

Malicious code in bioql PyPI...

EUVD-2022-32839

Malicious code in bioql PyPI...

EUVD-2024-0512

Malicious code in bioql PyPI...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the msdia140.dll process. An attacker can execute arbitrary code by supplying specially crafted input that triggers an integer overflow and subsequent heap-bas...

CVE-2025-36855

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...