Lucene search
+L

38664 matches found

Positive Technologies
Positive Technologies
added 2025/08/25 12:00 a.m.11 views

PT-2025-34712 · Pypi · Request-Filtering-Agent

Name of the Vulnerable Software and Affected Versions: request-filtering-agent versions 1.x.x and earlier Description: request-filtering-agent is an https.Agent implementation designed to block requests to Private/Reserved IP addresses. HTTPS requests to 127.0.0.1 bypass IP address filtering, whi...

6.9CVSS6.4AI score0.00458EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/08/24 4:07 p.m.9 views

CVE-2025-38638

In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6rtnotify inet6rtnotify can be called under RCU protection only. This means the route could be changed concurrently and rt6fillnode could return -EMSGSIZE. Re-size the skb when this happens and retry...

7CVSS6.1AI score0.00137EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/08/24 2:30 p.m.8 views

CVE-2009-10006

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS7.4AI score0.00867EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-10728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the...

5.3CVSS5.6AI score0.02091EPSS
SaveExploits1References2
Packet Storm News
Packet Storm News
added 2025/08/24 12:00 a.m.11 views

An Efficient Recommendation Filtering-Based Trust Model for Securing Internet of Things

Trust computation is crucial for ensuring the security of the Internet of Things IoT. However, current trust-based mechanisms for IoT have limitations that impact data security. Sliding window-based trust schemes cannot ensure reliable trust computation due to their inability to select appropriat...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/23 8:13 p.m.13 views

CVE-2010-20112

Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including...

9.3CVSS7.6AI score0.01121EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/08/23 1:37 a.m.212 views

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-33053 POC Exploit Overview The working director...

8.8CVSS9.7AI score0.85354EPSS
SaveExploits10
OSV
OSV
added 2025/08/22 4:15 p.m.16 views

UBUNTU-CVE-2025-38638

In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6rtnotify inet6rtnotify can be called under RCU protection only. This means the route could be changed concurrently and rt6fillnode could return -EMSGSIZE. Re-size the skb when this happens and retry...

5.5CVSS5.7AI score0.00137EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/08/22 4:00 p.m.16 views

CVE-2025-38638

In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6rtnotify inet6rtnotify can be called under RCU protection only. This means the route could be changed concurrently and rt6fillnode could return -EMSGSIZE. Re-size the skb when this happens and retry...

5.5CVSS5.4AI score0.00137EPSS
SaveExploits0
Snyk
Snyk
added 2025/08/22 2:43 p.m.5 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the IRC client process when handling crafted numeric replies from an IRC server. An attacker can execute arbitrary code by sending a specially crafted 001 message during the automatic IRC connection proces...

9.8CVSS7.7AI score0.00867EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/22 2:07 p.m.23 views

CVE-2009-10006

UFO: Alien Invasion (versions up to and including 2.2.1) contains a stack-based buffer overflow in the built-in IRC client component. When the client processes a crafted IRC 001 numeric reply during automatic IRC connection handling, the string length validation can overflow the stack, potentiall...

9.3CVSS7.6AI score0.00867EPSS
SaveExploits0References6
The Hacker News
The Hacker News
added 2025/08/22 11:06 a.m.31 views

Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage

Cybersecurity researchers are calling attention to malicious activity orchestrated by a China-nexus cyber espionage group known as Murky Panda that involves abusing trusted relationships in the cloud to breach enterprise networks. "The adversary has also shown considerable ability to quickly...

9.8CVSS7.7AI score0.99749EPSS
SaveExploits259
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.9 views

PT-2025-34366 · Unknown · Ufo: Alien Invasion

Name of the Vulnerable Software and Affected Versions: UFO: Alien Invasion versions up to and including 2.2.1 Description: UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow in its built-in IRC client component. When the client connects to an IRC server and receives ...

9.3CVSS7.3AI score0.00867EPSS
SaveExploits0References8
NVD
NVD
added 2025/08/21 8:15 p.m.15 views

CVE-2010-20112

Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including...

9.3CVSS0.01121EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/08/21 8:08 p.m.38 views

CVE-2010-20112 Amlibweb NetOpacs webquery.dll Stack Buffer Overflow

Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including...

9.3CVSS0.01121EPSS
SaveExploits1References6
CVE
CVE
added 2025/08/21 8:08 p.m.32 views

CVE-2010-20112

CVE-2010-20112 affects Amlib NetOpacs webquery.dll. The vulnerability is a stack-based buffer overflow triggered by improper handling of HTTP GET parameters, where bounds on the app parameter are not enforced, allowing data to overwrite memory structures including the SEH. Malformed parameter nam...

9.3CVSS7.6AI score0.01121EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/08/21 2:25 p.m.12 views

CVE-2024-45062

A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially configured printer that supports IPP-over-USB can cause a buffer overflow which can lead to a arbitrary code execution in a privileged service. To trigger the vulnerability, a malicious device would...

6.8CVSS8.3AI score0.00353EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.11 views

PT-2025-34307 · Uplusftp +1 · Uplusftp +1

Name of the Vulnerable Software and Affected Versions: EasyFTP Server versions 1.7.0.11 and earlier Description: EasyFTP Server versions 1.7.0.11 and earlier contain a stack-based buffer overflow in its HTTP interface. When processing a GET request to list.html, the server does not validate the...

9.3CVSS7.2AI score0.01555EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.6 views

TencentOS Server 4: iputils (TSSA-2025:0652)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0652 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.5CVSS6.6AI score0.01672EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.11 views

PT-2025-34264 · Unknown · Aikaan Iot Management Platform

Name of the Vulnerable Software and Affected Versions: Aikaan IoT management platform version 3.25.0325-5-g2e9c59796 Description: The Aikaan IoT management platform sends newly generated passwords to users in plaintext via email. The same password is also included as a query parameter in the...

8.8CVSS7AI score0.00231EPSS
SaveExploits0References6
Rows per page
Query Builder