CVE-2026-18460

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460

An off-by-one error leading to an out-of-bounds write vulnerability exists in the RTI Connext Professional (Core Libraries) . This flaw allows for overflow buffers and affects versions 7.4.0 before 7.7.0.1 and 7.0.0 before 7.3.1.6 . No specific exploitation details or remediation steps are provid...

EUVD-2026-84615

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP 服务器 使用 root@kitploit: $ docker-compose up 从 Docker Hub 使用 root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC 披露/CVE-2019-10092-modproxy 错误页面中的受限跨站脚本 - Apache httpd，位于 DrunkenShells/Disclosures 的 master 分支...

CVE-2019-10092

CVE-2019-10092：Apache HTTP Server "Proxy Error" 页面中的有限跨站脚本攻击 在 Apache HTTP Server 2.4.0-2.4.39 版本中，报告了一个影响 modproxy 错误页面的有限跨站脚本问题。攻击者可能导致错误页面上的链接格式错误，进而指向他们选择的页面。只有在服务器启用了代理功能但配置不当导致显示代理错误页面时，才可能利用此漏洞。 厂商披露： 厂商的披露及对此漏洞的修复可在此处找到：这里。 利用条件： 此漏洞需要： 能够访问 "Proxy Error" 页面的途径 用户交互 概念验证： 更多细节和利用过程可在此 PDF...

EUVD-2026-84545

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in documentroutes.py, graphroutes.py, queryroutes.py, ollamaapi.py, and lightragserver.py. The detail=stre, detail=strexc, and equivalent...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）拒绝服务 该漏洞利用在单个连接中发送过多\r\n时的内存错误。 示例 $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1 port 8080: Connection refused...

cpanel-xss-177

xss - cpanelCVE-2023-29489 cPanel en las versiones 11.102.0.x 11.102.0.31 / 11.106.0.x 11.106.0.x / 11.108.0.x 11.108.0.13 / 11.109.9999.x 11.109.9999.116 es vulnerable a Reflected Cross-Site Scripting a través de una solicitud especialmente diseñada al ID de Llamada web cuando se muestra en la...

CVE-2023-29489

Introducción Se ha descubierto una vulnerabilidad de Cross-Site Scripting XSS reflejado explotable en ciertas versiones de cPanel, a la que se le asignó el CVE-2023-29489. Esta vulnerabilidad permite a los atacantes ejecutar código JavaScript arbitrario sin requerir autenticación. La vulnerabilid...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descripción CVE-2022-42475 es una vulnerabilidad de heap-based buffer overflow en el servicio SSL VPN de FortiOS que permite a atacantes no autenticados ejecutar código arbitrario de forma remota RCE mediante solicitudes...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

CVE-2026-24418

CVE-2026-24418 OpenSTAManager --info 侦察 root@kitploit: 数据库信息 + 权限 + 用户凭据 python3 exploit.py -t http://target.com -u admin -p secret --all 检查MySQL权限（FILE、SUPER等） python3 exploit.py -t http://target.com -u admin -p secret --privs 凭据提取 root@kitploit: 转储用户并自动导出哈希 python3 exploit.py -t http://ta...

CVE-2023-25157-GeoServer-SQLi-Lab

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — Laboratorio de Vulnerabilidad e Informe de PoC Entorno de práctica Laboratorio Vulnerable e informe detallado de análisis de explotación de la vulnerabilidad SQL Injection Error-based en GeoServer CVE-2023-25157 y la biblioteca...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

CVE-2017-7308

CVE-2017-7308 ID CVE: CVE-2017-7308 Fecha de publicación: 2017-03-29T20:59:00.373 Puntuación base CVSS 3.0/3.1: 7.8 Descripción: La función packetsetring en net/packet/afpacket.c en el kernel de Linux hasta 4.10.6 no valida correctamente ciertos datos de tamaño de bloque, lo que permite a usuario...