Lucene search
+L

14724 matches found

Kitploit
Kitploit
added 2026/09/04 1:14 p.m.5 views

PoC-CVE-2025-69421

CVE-2025-69421 crash-only reproducer This repository contains a minimal malformed PKCS12 file that reproduces CVE-2025-69421 in an isolated laboratory environment. The generated PFX contains EncryptedData whose EncryptedContentInfo omits the optional encryptedContent field. Vulnerable OpenSSL...

7.5CVSS7.5AI score0.00877EPSS
SaveExploits1
Snyk
Snyk
added 2026/09/04 12:41 p.m.6 views

Authentication Bypass Using an Alternate Path or Channel

Overview fastify is an overhead web framework, for Node.js. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via malformed URLs in the fourOhFour router in lib/four-oh-four.js. An attacker can reach an encapsulated not-found handler and...

8.7CVSS0.00529EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/04 10:20 a.m.10 views

CVE-2026-76169

A flaw was found in fastify. Malformed URLs can be routed to a custom not-found handler of a different plugin, bypassing the intended security checks. This allows an unauthenticated attacker to access and read the full response of an authentication-protected private fallback, leading to informati...

7.5CVSS5.3AI score0.00529EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/04 10:17 a.m.5 views

CVE-2026-76169

fastify versions = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches...

7.5CVSS0.00529EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/04 9:51 a.m.28 views

CVE-2026-76169

Fastify (versions >= 4.0.0 and

7.5CVSS5.4AI score0.00529EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/04 9:51 a.m.6 views

EUVD-2026-70988

fastify versions = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches...

7.5CVSS5.4AI score0.00529EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/04 9:51 a.m.38 views

CVE-2026-76169 fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

fastify versions = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches...

7.5CVSS0.00529EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/04 9:51 a.m.3 views

CVE-2026-76169 fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

fastify versions = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches...

7.5CVSS5.7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/04 4:14 a.m.37 views

CVE-2026-85504

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

9.8CVSS0.00388EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/04 12:00 a.m.11 views

CVE-2026-80747

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the advertised subtype length fits. A malformed CRAT table with an oversized...

8CVSS5.4AI score0.00164EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/04 12:00 a.m.8 views

UBUNTU-CVE-2026-85504

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

9.8CVSS6.2AI score0.00388EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/09/04 12:00 a.m.9 views

CVE-2026-85504

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

9.8CVSS5.6AI score0.00388EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/03 11:02 p.m.7 views

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

7.1CVSS8.2AI score0.003EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/03 11:00 p.m.9 views

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

7.1CVSS8.2AI score0.003EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/03 11:00 p.m.9 views

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

7.1CVSS7.2AI score0.003EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/03 10:05 p.m.8 views

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

7.1CVSS8.2AI score0.003EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/03 8:04 p.m.8 views

CVE-2024-53027-WIP

CVE-2024-53027-WIP Work in Progress for POC CVE-2024-53027: Qualcomm Bluetooth/Wi-Fi Vulnerability 📄 Overview CVE-2024-53027 is a medium-severity vulnerability CVSS unrated affecting Qualcomm’s WLAN and Bluetooth chipsets in Android devices. It can cause transient denial-of-service DoS when...

7.5CVSS5.9AI score0.0029EPSS
SaveExploits1
NVD
NVD
added 2026/09/03 4:18 p.m.8 views

CVE-2026-85239

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

7.1CVSS0.0024EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 3:37 p.m.10 views

EUVD-2026-70533

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

7.1CVSS5.8AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/03 3:37 p.m.4 views

CVE-2026-85239 MISP Event Template Definition Validation Bypass Allows Persistent Denial of Service

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

7.1CVSS5.5AI score
SaveExploits0References4
Rows per page
Query Builder