7191 matches found
CVE-2026-108598
Floci versions 1.1.0 before 2.2.0 are vulnerable to a code injection flaw in the VtlTemplateEngine component. This vulnerability allows unauthenticated attackers to execute OS commands within the Floci JVM by creating a REST API with a MOCK integration . Attackers can leverage unrestricted Veloci...
CVE-2026-108598 Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates
Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtim...
EUVD-2026-96394
Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtim...
ecs-mapping
Pipeline di Ingest ECS di Corelight Il repository è composto da file di Ingest Pipeline necessari per l'utilizzo con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates L'installer in quel repository scaricherà i file da questo repository, pertanto...
CVE-2026-108598: Improper Control of Generation of Code
Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtim...
CVE-2026-101022
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
CVE-2026-101022
The openPDC software is vulnerable to a Server-Side Request Forgery (SSRF) issue within its Modbus connection feature. The software accepts caller-specified destination addresses and ports without restricting which internal hosts can be targeted. An authenticated user can exploit this to attempt ...
CVE-2026-101022 Grid Protection Alliance openPDC and openHistorian Server-Side Request Forgery (SSRF)
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
EUVD-2026-95782
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
CVE-2026-98224
A flaw was found in the Linux kernel's memory management subsystem. A local user could cause a Denial of Service DoS by triggering a failure during a memory mapping preparation operation. Because the kernel fails to properly release accounted memory when this operation fails, repeated triggers ca...
xray
XRay ha sido reimplementado en Rust y ampliado con más funcionalidades, este repositorio es código LEGADO. Usehttps://github.com/evilsocket/legba XRAY XRay es una herramienta para la recopilación de OSINT de red, su objetivo es automatizar algunas de las tareas iniciales de recopilación de...
PT-2026-108905
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
CVE-2026-101022: Server-Side Request Forgery (SSRF)
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
network-forensics
Network Forensics Investigations Blue-team network-forensics...
CVE-2026-85489
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...
PT-2026-107858
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...
SUSE CVE-2026-94114
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...
Linux Distros Unpatched Vulnerability : CVE-2026-94114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker- controlled classes under their self-declared names without...
DEBIAN-CVE-2026-94114
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...
AZL-108017 CVE-2026-94114 affecting package bcel 5.2-37
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...