818 matches found
CVE-2023-36163
Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting XSS Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter mc= and inject the JS code like: 'di...
MC-Log4j-Patcher
MC-Log4J-Patcher The goal of this project is to provide Minecraft players, and server owners, peace of mind in regards to the recently discovered Log4J exploit CVE-2021-44228. Currently this project looks for any Log4J format strings, not just jndi, and either replaces them or stops them from bei...
mc-log4j-patcher
mc-log4j-patcher Replaces old vulnerable - CVE-2021-44228 Log4j2 version with the latest one 2.15.0 that contains the JNDI RCE fix. Tested on Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 This is intended to fix servers that are currently unsupported, such as PaperSpigot 1.8.8 Please check...
Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlsa-2026_33226)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202633226 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Bug Fixes and Enhancements: glibc: counter overflow in...
Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (crlsa-2026_33126)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202633126 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Tenable has extracted the preceding description block directly...
PT-2026-98765
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the IGMP implementation when ip check mc rcu is called from RCU read-side critical sections, such as packet receive and route lookup fast paths including mkroute...
PT-2026-98764
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 multicast implementation where the ip6 mc del1 src function improperly handles the removal of source filters. When a filter count reaches zero, the function...
PT-2026-98763
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 multicast implementation where the ip6 mc source function modifies psl-sl addr and psl-sl count in-place during the addition or removal of source filters...
ROS-20260918-73-0111
The vulnerability of the drivers/bus/fsl-mc/fsl-mc-bus.c component in the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2026-66631
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
EUVD-2026-81511
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
CVE-2026-66631
CVE-2026-66631 affects the MC Woocommerce Wishlist WordPress plugin (plugin slug: smart-wishlist-for-more-convert ) in versions
CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MC Woocommerce Wishlist versions = 1.9.21...
CVE-2026-66631: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
PT-2026-94277
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
TencentOS Server 2: compat-glibc (TSSA-2026:1019)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1019 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Blocking calls to interrupt handlers without a trigger. The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL, and it may become NULL if the user sets the trigger eventfd to -1. The interrupt...