76895 matches found
CVE-2026-109569: Initialization of a Resource with an Insecure Default
sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root. Agent-run code in a container workspace can resolve absolute paths on the host to read and modify host files,...
CVE-2026-109339: Allocation of Resources Without Limits or Throttling
SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit. An attacker can run an Owner-installed malicious module that writes output without newlines, crashing...
PT-2026-110960
Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description An issue exists in the host firmware configuration parsing. An attacker with authenticated service-level access to the Flexible Service Processor FSP can write special...
PT-2026-110612
Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts path to a CA store that leaves that CA out. cacerts...
PT-2026-110957
Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1120.00 through FW1120.01 IBM Power Systems Firmware versions FW1110.00 through FW1110.31 IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A buffer overflow exists in the host...
EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-4129)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'Hello friends,', 'CVE-2026-8286: wrong STARTTLS connection reuse LOW', 'CVE-2026-8458: wrong reuse for different services LOW', 'CVE-2026-8924:...
Amazon Linux 2023 : flatpak-builder, flatpak-builder-tests (ALAS2023-2026-3152)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3152 advisory. When use-git-am: true is enabled for a patch source, flatpak-builder invokes git am without disabling git hooks. A malicious source can include a post-applypatch hook, which will be executed...
EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-4038)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'Hello friends,', 'CVE-2026-8286: wrong STARTTLS connection reuse LOW', 'CVE-2026-8458: wrong reuse for different services LOW', 'CVE-2026-8924:...
CVE-2026-96266: Stack-based Buffer Overflow
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...
CVE-2026-96263: Stack-based Buffer Overflow
IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted co...
CVE-2026-96262: Stack-based Buffer Overflow
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...
CVE-2026-96261: Stack-based Buffer Overflow
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash...
CVE-2026-6232: Out-of-bounds Write
An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer...
CVE-2026-85974: Improper Validation of Certificate with Host Mismatch
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A network-positioned attacker could exploit this weakness to intercept or modify communications with an affected service...
PT-2026-110958
Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A flaw exists in the service processor mailbox interface. An attacker with authenticated service-level access to the Field Service Processor FSP can send a specially...
jumpserver
Una plataforma PAM de código abierto Bastion Host ¿Qué es JumpServer? JumpServer es una plataforma de Gestión de Acceso Privilegiado PAM de código abierto que proporciona a equipos de DevOps y TI acceso seguro y bajo demanda a SSH, RDP, Kubernetes, bases de datos y puntos finales de RemoteApp a...
ccs-eval
Evaluates hosts for CVE-2014-0224 vulnerability https://vulners.com/cve/CVE-2014-0224 Usage: ccs-eval.py list-of-hosts.txt -Takes in a list of hosts, line seperated. Checks the host for common SSL ports using nmap. Peforms PoC injection test supplied by RedHat fake-client-early-ccs.pl. Writes...
spyre
Spyre ...un escáner modular autónomo y simple de IOC basado en host Spyre es un escáner simple de IOC basado en host, construido alrededor del motor de coincidencia de patrones YARA y otros módulos de escaneo. El objetivo principal de este proyecto es facilitar la operacionalización de reglas YAR...
CVE-2024-21626
CVE-2024-21626 Exploit Working Directory docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Important is to put -w /proc/self/fd/8\ Access the host filesystem using cat ../../../../../../../../../etc/passwd inside the container Exploit Symlink 1. docker run --name...