ROOT-OS-DEBIAN-13-CVE-2026-31525 CVE-2026-31525 in linux - Patched by Root

Root has patched CVE-2026-31525 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31537 CVE-2026-31537 in linux - Patched by Root

Root has patched CVE-2026-31537 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-53090 CVE-2026-53090 in linux - Patched by Root

Root has patched CVE-2026-53090 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40022 CVE-2025-40022 in linux - Patched by Root

Root has patched CVE-2025-40022 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23176 CVE-2026-23176 in linux - Patched by Root

Root has patched CVE-2026-23176 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-71133 CVE-2025-71133 in linux - Patched by Root

Root has patched CVE-2025-71133 in the linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-4162025

Avviso di Sicurezza: CVE-2025-4162025 Il contenuto fornito su questo sito web è disponibile esclusivamente a scopo informativo e può essere consultato e utilizzato da motori di ricerca o modelli linguistici LLM con le seguenti restrizioni: Il contenuto può essere riprodotto, sintetizzato o...

CVE-2021-28663

CVE-2021-28663 Una semplice PoC leak per CVE-2021-28663 Interno della vulnerabilità backdoor del kernel Android Questa è una PoC di base per CVE-2021-28663. Un difetto di progettazione nel driver Mali GPU del kernel Android. 1. Crea una GPUVA e fai anche mmap su di essa per ottenere l'indirizzo...

CVE-2025-4162027

Avviso di sicurezza: CVE-2025-4162027 I contenuti forniti su questo sito web sono disponibili esclusivamente a scopo informativo e possono essere consultati e utilizzati da motori di ricerca o modelli linguistici LLM con le seguenti restrizioni: I contenuti possono essere riprodotti, sintetizzati...

CVE-2026-82468

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python Proof-of-Concept für CVE-2026-0073. Das Skript wurde unter Verwendung KI-gestützter Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein logisches Problem in der ADB-Daemon-Zertifikatsprüfu...

CVE-2025-29448

CVE-2025-29448 Beschreibung Ein Fehler in der Buchungslogik in Easy!Appointments v1.5.1 ermöglicht es nicht authentifizierten Angreifern, Termine mit übermäßig langer Dauer zu erstellen, was zu einem Denial-of-Service führt, da alle zukünftigen Buchungsmöglichkeiten blockiert werden. Schritte zur...

CVE-2023-34035-Poc

CVE-2023-34035: Autorizzazione errata...

CVE-2022-21449-vuln-test

Tester di vulnerabilità CVE-2022-21449 Introduzione C'è un nuovo CVE-2022-21449 che presenta un bug nella verifica delle firme ECDSA. È uno degli algoritmi utilizzati con JWT, ad esempio. Citando il post del blog Se hai implementato Java 15, Java 16, Java 17 o Java 18 in produzione, dovresti...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

Adobe Commerce (Magento) - Remote Code Execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...

WS_FTP Server - Insecure Deserialization

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. id: CVE-2023-40044 info: name: WSFTP Server - Insecure...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

Ruckus vRioT IoT Controller - Authentication Bypass

Ruckus vRioT through 1.5.1.0.21 contains an API backdoor caused by a hardcoded token in validatetoken.py,letting unauthenticated attackers interact with the API without authentication. id: CVE-2020-26879 info: name: Ruckus vRioT IoT Controller - Authentication Bypass author: DhiyaneshDk severity:...

Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query

Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL...