91069 matches found
Exploit for Out-of-bounds Write in Libgd
CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donate Suppo...
Exploit for Improper Authentication in Openprinting Cups
cve-id Donate Support the maintenance of this project wit...
Exploit for Improper Input Validation in Openprinting Cups
cve-id Donate Support the maintenance of this project wit...
exploitarium
Statement This repo was incomplete when published. In regar...
cve-2026-poc-collection
CVE-2026 Proof-of-Concept PoC Collection Report Collectio...
Hardware Keystores for AI Agent Signing Workflows: A Zero-Trust MCP Enforcement Architecture
AI agents performing cryptographic operations signing Git commits, authenticating API calls, issuing certificates currently store private keys in software-accessible locations: plaintext files, environment variables, or container memory. Any process with sufficient read privileges can extract the...
FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (10f5f76e-90a5-11f1-bc30-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5f76e-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which...
FreeBSD : MySQL 8.4 -- Multiple vulnerabilities (10f5d195-90a5-11f1-bc30-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5d195-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 31 of which...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2930)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2889)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...
kernel security, bug fix, and enhancement update
6.12.0-211.43.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
PT-2026-68780
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 architecture where the Safe-RET mitigation is susceptible to interrupt injection on machines affected by Speculative Return Stack Overflow SRSO, a condition...
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
TencentOS Server 4: kernel (TSSA-2026:0792)
"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0792 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilitie...
Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
Summary There is a medium-severity cross-provider reference vulnerability in Traefik's Kubernetes CRD provider. The crossProviderNamespaces allowlist is enforced for HTTP serversTransport references but was not enforced for IngressRouteTCP service serversTransport references. A low-privileged...
GHSA-42CJ-M3VJ-89WV Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
Summary There is a medium-severity cross-provider reference vulnerability in Traefik's Kubernetes CRD provider. The crossProviderNamespaces allowlist is enforced for HTTP serversTransport references but was not enforced for IngressRouteTCP service serversTransport references. A low-privileged...
GHSA-QQ9Q-X9W4-CHHJ Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion
Summary There is a medium-severity namespace-confusion vulnerability in Traefik's Kubernetes Gateway API provider. When resolving HTTPRoute.spec.rules.backendRefs.filters.extensionRef, Traefik used the backend Service namespace instead of the HTTPRoute namespace. A low-privileged route author...
Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion
Summary There is a medium-severity namespace-confusion vulnerability in Traefik's Kubernetes Gateway API provider. When resolving HTTPRoute.spec.rules.backendRefs.filters.extensionRef, Traefik used the backend Service namespace instead of the HTTPRoute namespace. A low-privileged route author...