CVE-2026-18649

CVE-2026-18649 - GStreamer rtph264depay Unbounded Memory Growth DoS Proof of concept for a resource exhaustion vulnerability in GStreamer's H.264 RTP depayloader rtph264depay. The same pattern also affects rtph265depay. What it is During H.264 FU-A fragmented RTP reassembly, each incoming fragmen...

DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 My DEFCON30 Cloud Village KQL Kung Fu Workshop slide deck lives here: DEFCON30-KQL-Kung-Fu.pdf If you'd like to practice your KQL skills, visit this Log Analytics Workspace that's maintained with tons of log data by Microsoft: aka.ms/lademo...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu は、私が書いた Ruby ベースの MySQL クライアントスクリプトです。 通常の MySQL クライアントが実行できることのほとんどを行えます: SQL シェル、データベース/テーブルの更新・削除・ドロップ、ユーザーの追加/削除、gzip オプション付きのデータベース/テーブルのダンプ...... さらに、ペンテストを少し楽にするための追加オプションもいくつか含まれています。 組み込みの PHP コマンドシェルオプションに加えて、Pentestmonkey の PHP...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

EUVD-2026-58073

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

Zimbra Collaboration versions before 10.1.17 are affected by a local file inclusion (LFI) vulnerability in the Forward servlet of the Classic Web Client. The root cause is improper validation of the fu request parameter, allowing an unauthenticated attacker to supply a crafted path and disclose p...

PT-2026-71680

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 10.1.17 Description A local file inclusion LFI issue exists in the Zimbra Classic Web Client within the Forward servlet. This is caused by improper validation of the fu request parameter, which allows an...

EUVD-2025-137619

Malicious code in gociay-unga-fu npm...

MAL-2025-11503 Malicious code in @zalastax/nolb-fu (npm)

The package @zalastax/nolb-fu was found to contain malicious code...

Malicious code in @zalastax/nolb-fu- (npm)

The package @zalastax/nolb-fu- was found to contain malicious code...

Malicious code in @zalastax/nolb-fu (npm)

The package @zalastax/nolb-fu was found to contain malicious code...

MAL-2025-11504 Malicious code in @zalastax/nolb-fu- (npm)

The package @zalastax/nolb-fu- was found to contain malicious code...

Ubuntu: Security Advisory (USN-6879-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-6877 Malicious code in drupal-fu (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in drupal-fu (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

isis.ub.fu-berlin.de Cross Site Scripting vulnerability OBB-3878597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30996

creationtimestamp| type| source ---|---|--- 2024-03-14 04:16:58+00:00| seen| https://t.me/ctinow/207415...

learnshaolinkungfu.com Cross Site Scripting vulnerability OBB-3837905

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

userpage.fu-berlin.de Cross Site Scripting vulnerability OBB-3408292

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...