208845 matches found
CVE-2026-16233
CVE-2026-16233 is an out-of-bounds write memory corruption vulnerability in NI LabVIEW triggered when loading a specially crafted VI file. Successful exploitation requires local access and user interaction (opening the malicious VI), but no prior privileges. The impact ranges from information dis...
CVE-2026-16233 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-16233 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
EUVD-2026-65582
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
Vulnerability_Assessment_and_Exploitation
VulnerabilityAssessmentandExploitation This assessment was...
GHSA-Q27Q-98J4-9PFV qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
Summary The qwed package version 5.1.1 passes attacker-controlled input directly to SymPy's parseexpr function without a restricted namespace. Because parseexpr internally calls Python's eval, any authenticated tenant can execute arbitrary Python code inside the API server process. The attack...
qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
Summary The qwed package version 5.1.1 passes attacker-controlled input directly to SymPy's parseexpr function without a restricted namespace. Because parseexpr internally calls Python's eval, any authenticated tenant can execute arbitrary Python code inside the API server process. The attack...
GHSA-HQ3H-G68C-HP78 urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
Summary urllib supports redirect-following through followRedirect, which is expected behavior for an HTTP client. The issue is that, when following a redirect to a different origin, urllib preserves the caller-supplied request headers verbatim, including credential-bearing headers such as...
urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
Summary urllib supports redirect-following through followRedirect, which is expected behavior for an HTTP client. The issue is that, when following a redirect to a different origin, urllib preserves the caller-supplied request headers verbatim, including credential-bearing headers such as...
CVE-2026-18445 Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW
There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This...
CVE-2026-18445 Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW
There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This...
EUVD-2026-65607
There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This...
CVE-2026-18445
NI LabVIEW is affected by an integer overflow that leads to an out-of-bounds write in the processing of VI files . A successful attack requires a user to open a specially crafted VI file , which may result in information disclosure or arbitrary code execution . The vulnerability affects NI LabVIE...
CVE-2021-3899_PoC
CVE-2021-3899 PoC Riproduzione 0. Installa una versione precedente di apport: sudo apt-get install apport=2.20.11-0ubuntu27 qualsiasi versione apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0...
CVE-2026-18444 Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW
There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI...
EUVD-2026-65601
There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI...
CVE-2026-18444 Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW
There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI...
CVE-2026-18444
An integer conversion vulnerability in NI LabVIEW (2026 Q3 and prior versions) leads to an out-of-bounds read when loading images. Successful exploitation requires a user to open a specially crafted VI file , after which information disclosure or arbitrary code execution may occur. The CVSS 3.1 b...
Exploit for OS Command Injection in Php
CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab /...
CVE-2026-41940_exploit
CVE-2026-41940 - Exploit di Bypass dell'Autenticazione di cPanel e WHM Vulnerabilità: Manipolazione del file di sessione tramite iniezione CRLF nel gestore di autenticazione HTTP Basic di cpsrvd CVE: CVE-2026-41940 CVSS: 9.8 Critico CWE: CWE-93 Iniezione CRLF / CWE-306 Autenticazione Mancante...