gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. INSTALL git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt USAGE Scan a single...

CVE-2026-96611

A flaw was found in FFmpeg. A local attacker can craft a malicious High Efficiency Image File Format HEIF file that, when processed, can cause a signed integer overflow. This overflow allows width and height values to become negative, bypassing internal validity checks. This can lead to data...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with Remote Access VPN or Mobile Access Software Blades. A securit...

r3con

R3CON 多功能 Web 侦察与漏洞扫描工具 r3con 是一款多功能 Web 侦察与漏洞扫描工具，也是一个超快速的爬虫，能够发现多种漏洞并收集信息。 漏洞检测 反射型 XSS 多线程爬取 开放重定向 子域名接管 SQL 注入 HTML 注入 SSRF CSRF CORS 发现易受攻击的 JS 库 信息泄露 侦察信息收集 Web IP 地址 服务器 IP 地址 Cname 记录 DNS 查询 SPF 查询 隐藏 IP API 端点 JS 端点 XSS 端点 目录搜索 子域名枚举 安装 root@kitploit: https://github.com/thenurhabib/r3con...

CVE-2026-96599

Versions of Isotope eCommerce through 2.9.10 are vulnerable to an identifier prediction flaw. The application uses the uniqid() function rather than a cryptographically secure source to generate order identifiers. Because guest orders lack proper ownership verification, an unauthenticated attacke...

EUVD-2026-85340

Isotope eCommerce through 2.9.10 derives order identifiers from uniqid instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifiers. Guest orders lack ownership verification, enabling attackers to access order details including billing address, customer...

CVE-2024-36527

CVE-2024-36527 PoC and Bulk Scanner Overview POC for CVE-2024-36527: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. Based on the security advisory published ...

skiptracer

Account moved to: https://gitlab.com/illwill No longer supported at this time. Python 3 migration in progress, please do not report issues yet, as the code and the sources need a bunch of upgrading. Project moved to https://gitlab.com/illwill/skiptracer...

monitorr-exploit-toolkit

Monitorr exploit toolkit RCE via unsecure file upload PHP reverse shell, webshell, etc. Administrator account creation via Authorization bypass Technical information leakage : Monitorr version, PHP version, System version & kernel, PHP config, etc. Exploit for CVE-2020-28872 and CVE-2020-28871...

EUVD-2026-85337

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-73591

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-73591

Dell Secure Connect Gateway (SCG) Policy Manager , specifically versions prior to 5.34.00.16 , is affected by an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could exploit this flaw to cause Information exposure . No specific deta...

Solspace Freeform: Limited Twig template injection via submitted field values

Summary A limited server-side Twig template injection issue was identified in Solspace Freeform for Craft CMS. In affected versions, submitted form field values could be evaluated as Twig in certain rendering contexts. Unauthenticated users could submit Twig expressions through public Freeform...

EUVD-2026-85335

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information...

CVE-2026-73589

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information...

CVE-2026-73589

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and 5.36 are affected by a Weak Encoding for Password vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Information disclosure , Information tampering , Protection mechanism b...

CVE-2026-73858

The Solspace Freeform plugin for Craft CMS (versions 5.0.0 through 5.10.13) is vulnerable to a limited server-side Twig template injection (SSTI). An unauthenticated attacker can submit Twig expressions through public Freeform forms; these expressions are evaluated by the isolated Twig renderer w...

CVE-2026-68536

A flaw was found in Apache MyFaces Core. This vulnerability allows a remote attacker to perform Server-Side Request Forgery SSRF, which can trick the server into making requests to arbitrary domains, potentially accessing internal resources. Additionally, Local File Inclusion LFI is possible,...

CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure

PRTG-Network-Monitor-Information-Disclosure - CVE-2020-11547 Remote unauthenticated user can craft an HTTP request in /public/login.htm or /index.htm by providing the 'type' parameter. Example: http://127.0.0.1/public/login.htm?type=probes replace probes by any of the following to get diferent in...