66493 matches found
CVE-2026-75880 Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0...
CVE-2026-75880 Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0...
DirtyFrag-for-dummies
Dirty Frag / CVE-2026-43284 — Notas de investigación Resumen Este repositorio contiene un diagrama técnico depurado y notas complementarias para la vulnerabilidad del kernel de Linux comúnmente conocida como Dirty Frag y rastreada para la ruta xfrm-ESP como CVE-2026-43284. El problema pertenece a...
CVE-2025-49132-Pterodactyl-Panel-RCE
CVE-2025-49132 — Panel de Pterodactyl Investigación de Seguridad y Análisis Educativo Resumen Este proyecto documenta la investigación relacionada con CVE-2025-49132 , una vulnerabilidad que afecta al Panel de Pterodactyl. Propósito: Investigación de seguridad, educación, conciencia defensiva Usa...
CopyFail-for-dummies
Copy Fail / CVE-2026-31431 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Copy Fail and tracked as CVE-2026-31431. The purpose of this material is: to explain the bug mechanism at a...
CVE-2025-62168
CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...
CVE-2021-3156
CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...
CVE-2025-62168
CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...
Apache-Dubbo-Hessian2-CVE-2021-43297
Deserialization during Apache Dubbo Hessian2 Exception Handling CVE-2021-43297 1. Import the two projects into two separate IDEA instances 2. First run org.apache.dubbo.samples.basic.BasicProvidermain to start the server 3. Then run org.apache.dubbo.samples.basic.BasicConsumermain to start the...
CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CVE-2026-20841-PoC
CVE-2026-20841-PoC Proof of Concept for CVE-2026-20841 CVE-2026-20841 – Details CVE-2026-20841 is a vulnerability affecting Microsoft Notepad, where specially crafted input can trigger unintended command execution. The issue occurs due to improper handling of certain file content or execution...
CVE-2025-26263
CVE-2025-26263 CVE-2025-26263 - GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process. Requirements To perform successful attack an attacker requires: System lev...
CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nSVM module. When a nested virtual machine L2 guest executes VMSAVE/VMLOAD instructions, and these are not intercepted by the first-level hypervisor L1, KVM incorrectly uses vmcb02 instead of vmcb01 for managing guest state...
kernel: ipv4: account for fraggap on the paged allocation path
A flaw was found in the Linux kernel's handling of IPv4 network packets. An error in how the kernel accounts for fragmented data during memory allocation can lead to an undersized memory buffer. This memory handling issue could potentially be exploited by a remote attacker to cause a system crash...
qt5-qtbase security update
An update is available for qt5-qtbase. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing applications. The qt5-base package...
MiracleLinux 8 : microcode_ctl-20260812-1.el8_10 (AXSA:2026-1799:07)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1799:07 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...
CVE-2026-71640
ZJU-FAST-Lab EGO-Planner-v2 , an autonomous driving motion planning system, is affected by improper handling of expired trajectory data in its replanning pipeline across all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42. The flaw can result in unsafe vehicle motion , as stale tra...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS : ImageMagick vulnerabilities (USN-8739-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8739-1 advisory. It was discovered that ImageMagick incorrectly handled certain images. An attacker could...
