375 matches found
tomcat85-check
tomcat85-check Still running Tomcat 8.5? This tool tells you exactly which 2025 CVEs you're affected by — because on this question, you can't get a complete answer from the official page, NVD, or scanners. Zero-dependency single jar, runs offline, no network, uploads nothing. What it solves Tomca...
msxml4-remediation
معالجة MSXML 4.0 PowerShell نص PowerShell لمعالجة النتائج الأمنية المتعلقة بـ Microsoft XML Core Services MSXML 4.0 ، والتي لم تعد مدعومة ويتم الإبلاغ عنها عادة بواسطة ماسحات الثغرات الأمنية. يقوم هذا النص الذي قمتُ بإنشائه بإلغاء تسجيل ملفات .dll لـ MSXML 4 وإعادة تسميتها. يؤدي ذلك إلى معالجة...
CentOS7_CVE-2021-3712_Remediation
:toc: :toclevels: 4 == المشكلة لدى العميل جهاز CentOS7 قديم وصل إلى نهاية العمر الافتراضي EOL يعمل CentOS7 بنسخة قديمة من openssl متأثرة بـ link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 كيف يجب تصحيح openssl على CentOS7 القديم لمعالجة CVE؟ == الخطوات 1...
jetty-line-check
jetty-line-check Which of these six 2026 CVEs has your Jetty or the Jetty pulled in by Spring Boot been hit by — and does the version the official guidance tells you to upgrade to actually exist on Maven Central? The headline is CVE-2026-2332 GHSA-355h-qmc2-wpwf, high / CVSS v3 7.4: chunked reque...
BIT-DOTNET-2025-36854 EOL ASP.NET 6.0 Remote Code Execution Vulnerability
A vulnerability CVE-2024-38229 https://www.cve.org/CVERecord exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution. Per CWE-416: Use After Free...
Sociotechnical Aspects of Tor Relay Rejection
In 2019, the Tor Project enforced an end-of-life EoL policy for Tor versions, leading to the rejection of outdated relays, amounting to a notable fraction of consensus weight. While this policy aids network maintenance, reduces backporting efforts, and shortens vulnerability exposure, its...
EUVD-2026-68911
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
Beyond Patching: What IT Teams Need to Know About Unfixable Exposures
Executive Summary Most IT teams still operate under a false binary:patch or accept risk. That assumption creates unnecessary operational pressure. Patchless remediation is real and production-proven. Mitigate, Uninstall, Run Custom Scripts, Isolate ; close exposure when no reliable patch exists...
Exploit for CVE-2026-0603
CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injec...
PT-2026-57531
A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub 42026C of the file /goform/tools ddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched...
CVE-2026-10179: Stack-based Buffer Overflow
A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument webpage causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...
[SECURITY] [DLA 4548-1] distro-info-data database update
Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 25, 2026 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u11 This is a routine update of the distro-info-data database for Debian LTS users. It updates t...
Debian dla-4548 : distro-info-data - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4548 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/...
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview UmbracoForms is a tool that makes creating contact forms, entry forms and questionnaires just as easy as using Word. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the dynamic SOAP client generation...
CVE-2025-15257: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The...
EUVD-2017-16965
Malware in sbrugna...
EUVD-2025-12381
Malicious code in bioql PyPI...
EUVD-2024-51082
Malicious code in bioql PyPI...