CVE-2026-81705 openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

CVE-2026-81101

Airtable MCP CLI before 0.2.5 contained a credential-disclosure flaw in its configure command. The ConfigureCommand.execute method in src/cli.ts persisted a user-supplied endpoint URL without validating it through createSafeUrl in src/config.ts—the helper that already restricted the equivalent en...

CVE-2026-81101 Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint

The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-80212

CVE-2026-80212 is a memory exhaustion vulnerability in the resolv gem before 0.7.2 for Ruby. The root cause is that Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create permanently register a new class for every unknown DNS resource rec...

CVE-2021-41773h

CVE-2021-41773 Vulnerabilità di path traversal e divulgazione di file in Apache HTTP Server 2.4.49 CVE-2021-41773 Info È stato riscontrato un difetto in una modifica apportata alla normalizzazione dei percorsi in Apache HTTP Server 2.4.49. Un attaccante potrebbe utilizzare un attacco di path...

CVE-2026-79771

A flaw was found in Nokogiri. Attackers can exploit a memory leak in the XSLT Stylesheet transform method by providing specially crafted input containing null bytes. This can lead to excessive memory consumption and enable a denial of service against long-running processes...

etherleak-checker

Etherleak-Schwachstellenprüfer Dieses Python-Skript hilft, die Etherleak-Schwachstelle CVE-2003-0001 auf einem Zielhost zu erkennen, indem es die Padding-Daten in Netzwerkpaketen analysiert. Das Skript verwendet Scapy, um verschiedene Arten von Anfragen ICMP, ARP oder TCP zu senden und prüft, ob...

CVE-2019-6207

CVE-2019-6207 यह भेद्यता macOSwop == NETRTFLAGS || w-wop == NETRTFLAGSPRIV && !rt-rtflags & w-warg goto done; / If the matching route has RTFLLINFO set, then we can skip scrubbing the MAC only if the outgoing interface is not loopback and the process...

CVE-2026-76227

A flaw was found in Renovate. The application fails to restrict environment variables when it creates new child processes. This oversight allows these child processes, such as those used for package installation or post-upgrade tasks, to access all environment variables of the main Renovate...

CVE-2026-74735

A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol implementation. A local user could trigger a reference count leak by closing specific /proc or /sys files related to L2TP tunnels and sessions before fully reading their content. This could lead to resource exhaustion,...

cve-2023-23397-purple-team

CVE-2023-23397 — Purple Team: Exploit + Deteção Duas metades de um projeto contra a mesma vulnerabilidade de fuga de NTLM do Outlook CVE-2023-23397: Red team concluído: entrega de phishing + exploração da CVE-2023-23397 contra uma VM vítima Windows 10, relatório completo em FINALPROJECTREPORT.pdf...

cPanel-CVE-2026-41940-Scanner

cPanel-CVE-2026-41940-Scanner Dieses Hochleistungs-Sicherheitstool wurde entwickelt, um CVE-2026-41940 zu identifizieren und auszunutzen, eine kritische CRLF-Injection-Schwachstelle in cPanel & WHM. Es automatisiert den gesamten Prozess von der Shodan-Erkennung bis zur Erstellung administrativer...

CVE-2026-80571

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

CVE-2026-80539

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. When processing graphics commands, the driver fails to properly handle multiple "FENCE chunks" in a single submission. This oversight leads to a memory leak, where system resources are not released as expected. A local attacker...

ICMP-Timestamp-POC

ICMP Timestamp Informationsoffenlegungs-Scanner CVE-1999-0524 Ein Satz von Skripten zur Erkennung und Demonstration der ICMP Timestamp Informationsoffenlegung -Schwachstelle CVE-1999-0524. Diese Werkzeuge senden präparierte ICMP Typ 13 Timestamp Request Pakete und analysieren Antworten, um...

CVE-2025-24071

CVE-2025-24071: Microsoft Windows Datei-Explorer Spoofing-Sicherheitslücke Skript von SilentExploit 📖 Beschreibung Dieses Projekt erkennt und demonstriert die Ausnutzung einer Windows Datei-Explorer Spoofing-Sicherheitslücke. Das Problem ergibt sich aus einer Windows-Bibliotheksdatei .library-ms,...

cve-2026-20127

CVE-2026-20127 Scanner Übersicht Dieses Projekt ist ein Windows-basiertes Netzwerk-Scan-Tool, geschrieben in C++, das versucht, potenzielle Cisco SD-WAN / vManage-ähnliche Dienste zu identifizieren und eine Schwachstellenprüfung gegen eine referenzierte Schwachstelle mit der Bezeichnung...

EUVD-2026-66504

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...