25090 matches found
PT-2026-66405
Name of the Vulnerable Software and Affected Versions Spring Tools for Eclipse versions prior to 5.2.1 Description The Boot Dashboard Docker integration publishes container control ports on all host network interfaces 0.0.0.0 instead of restricting them to the loopback interface. This configurati...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
EUVD-2026-50443
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...
CVE-2026-54727
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
CVE-2026-54727
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
UNIX Symbolic Link (Symlink) Following
Overview proot-distro is a PRoot-Distro is a lightweight rootless Linux container management utility built around proot. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the prootdistro/commands/install.py function and the equivalent process in...
CVE-2026-67191
Xlight FTP Server prior to 3.9.5 is affected by a pre-authentication heap buffer overflow in the SSH parser. A logic error in the recv loop termination (OR instead of AND) enables exploitation on any SSH or SFTP connection before authentication, allowing remote unauthenticated access with high im...
CVE-2026-67213
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
CVE-2015-8778
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/nEfx4bkJlcldrL4ooYbVX-cKtKfFWPCKK6-GEAcf7FF 2026-07-30 00:02:02+00:00| seen| Telegram/nEfx4bkJlcldrL4ooYbVX-cKtKfFWPCKK6-GEAcf7FF 2026-08-01 15:00:04+00:00| seen|...
CVE-2022-0558
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:07+00:00| seen| https://t.me/CVEhub/18972 2026-07-30 00:00:24+00:00| published-proof-of-concept| https://t.me/CVEhub/18972...
CVE-2026-64439
A flaw was found in the Linux kernel's Kerberos 5 krb5 cryptography module. This use-after-free vulnerability occurs when an asynchronous Authenticated Encryption with Associated Data AEAD instance is used. The system prematurely frees a memory buffer while a backend process still holds a pointer...
Exploit for CVE-2026-61511
CVE-2026-61511 – Proof of Concept Educational and defen...
PT-2026-65834
Name of the Vulnerable Software and Affected Versions AMMOS Instrument Toolkit AIT GUI versions prior to 2.5.1 Description An authentication flaw allows an unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands. This is possible by calling the...
SUSE SLES12 Security Update : kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3388-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3388-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: -...
SUSE SLED15: java-25-openjdk / java-25-openjdk-demo / java-25-openjdk-devel / etc (SUSE-SU-2026:3331-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3331-1 advisory. Update to upstream tag jdk-25.0.4+7 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...
RHEL 9 : kpatch-patch (RHSA-2026:47997)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47997 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...
PT-2026-65811
Name of the Vulnerable Software and Affected Versions anoid Nano ID versions prior to 5.1.6 Description The customAlphabet and customRandom functions contain an infinite loop. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and...
VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
Advisory ID: | VMSA-2026-0006.2 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 2.7-9.8 Synopsis: | VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 Issue date: | 2026-07-29...
CVE-2026-66063 goshs has a Path Traversal issue
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This...