Lucene search
+L

2322 matches found

The Hacker News
The Hacker News
added 2026/02/09 11:23 a.m.25 views

How Top CISOs Solve Burnout and Speed up MTTR without Extra Hiring

Why do SOC teams keep burning out and missing SLAs even after spending big on security tools? Routine triage piles up, senior specialists get dragged into basic validation, and MTTR climbs, while stealthy threats still find room to slip through. Top CISOs have realized the solution isn’t hiring...

6.2AI score
SaveExploits0
OSV
OSV
added 2026/02/02 1:15 p.m.14 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS6AI score
SaveExploits0References3
EUVD
EUVD
added 2026/02/02 12:38 p.m.12 views

EUVD-2026-5101

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.7AI score0.00202EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/02 12:38 p.m.6 views

CVE-2026-1757 Libxml2: memory leak leading to local denial of service in xmllint interactive shell

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.7AI score0.00202EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/02/02 12:38 p.m.10 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS4.6AI score0.00202EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/02/02 12:38 p.m.8 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.7AI score0.00202EPSS
SaveExploits0References5
CVE
CVE
added 2026/02/02 12:38 p.m.89 views

CVE-2026-1757

CVE-2026-1757 describes a memory leak in the interactive shell of the libxml2 xmllint utility. When a user enters input consisting only of whitespace, the shell skips command execution but does not free the allocated buffer, allowing memory to accumulate over repeated actions. This can lead to lo...

6.2CVSS5.7AI score0.00202EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/02/02 12:38 p.m.19 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.3AI score0.00202EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/02 12:00 a.m.18 views

libxml2 安全漏洞

Libxml2 is an open-source library from GNOME that is used for parsing XML documents. It is written in C language and can be called in various languages, such as C, C++, and XSH. Libxml2 has a security vulnerability, which stems from improper memory release in interactive shells, potentially leadi...

6.2CVSS5.7AI score0.00202EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/30 3:39 p.m.22 views

CVE-2025-7713

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows XSS Through HTTP Headers.This issue affects Content Management System CMS: through 21072025...

7.5CVSS5.9AI score0.00178EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/30 3:39 p.m.25 views

CVE-2025-7714

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows Command Line Execution through SQL Injection.This issue affects Content Management System CMS: through 21072025...

9.8CVSS5.9AI score0.00327EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2026/01/30 12:00 a.m.209 views

📄 LibreChat MCP 0.8.2-rc2 Remote Code Execution

This proof of concept exploit targets the LibreChat MCP remote code execution vulnerability known as CVE-2026-22252. It provides a comprehensive and professional framework for detecting, testing, and exploiting the vulnerability with multiple extraction modes...

9.9CVSS6.5AI score0.04129EPSS
SaveExploits4
OSV
OSV
added 2026/01/29 3:16 p.m.16 views

CVE-2025-7714

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows Command Line Execution through SQL Injection.This issue affects Content Management System CMS: through 21072025...

9.8CVSS5.9AI score0.00327EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/29 3:16 p.m.18 views

CVE-2025-7714

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows Command Line Execution through SQL Injection. This issue affects Content Management System CMS: through 21072025...

9.8CVSS0.00327EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:44 p.m.9 views

CVE-2025-7714

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows Command Line Execution through SQL Injection. This issue affects Content Management System CMS: through 21072025...

9.8CVSS5.7AI score0.00327EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/29 2:44 p.m.10 views

EUVD-2025-206547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows Command Line Execution through SQL Injection.This issue affects Content Management System CMS: through 21072025...

7.5CVSS5.9AI score0.00327EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/29 2:38 p.m.16 views

EUVD-2025-206545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows XSS Through HTTP Headers.This issue affects Content Management System CMS: through 21072025...

7.5CVSS5.9AI score0.00178EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:38 p.m.6 views

CVE-2025-7713

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows XSS Through HTTP Headers. This issue affects Content Management System CMS: through 21072025...

7.5CVSS5.4AI score0.00178EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.24 views

Global Interactive Design Media Content Management System SQL Injection Vulnerability

Global Interactive Design Media Content Management System is a content management system developed by the Turkish company Global Interactive Design Media. The versions of the Global Interactive Design Media Content Management System prior to version 21072025 have a SQL injection vulnerability. Th...

9.8CVSS6AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.13 views

PT-2026-5295

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows XSS Through HTTP Headers.This issue affects Content Management System CMS: through 21072025...

7.5CVSS5.9AI score0.00178EPSS
SaveExploits0References2
Rows per page
Query Builder