1785 matches found
Memcrashed-DDoS-Exploit
HERRAMIENTA DE EXPLOTACIÓN DDOS MEMCRASHED Autor: @037 Esta herramienta te permite enviar paquetes UDP falsificados a servidores Memcached obtenidos de Shodan.io Prerrequisitos Lo único que necesitas tener instalado es Python 3.x apt-get install python3 También necesitas tener instalados los...
CVE-2024-44902
CVE-2024-44902 Descripción de la vulnerabilidad Una vulnerabilidad de deserialización en Thinkphp v6.1.3 a v8.0.4 permite a atacantes ejecutar código arbitrario. Versiones afectadas Thinkphp v6.1.3 a v8.0.4 Condición de explotación El framework thinkphp debe tener instalada la extensión Memcached...
Gopherus
Gopherus If you know a place which is SSRF vulnerable then, this tool will help you to generate Gopher payload for exploiting SSRF Server Side Request Forgery and gaining RCE Remote Code Execution. And also it will help you to get the Reverse shell on the victim server. And for more information y...
CVE-2026-103831
CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...
CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin
CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...
CVE-2026-103831
The TrueLayer Magento 2 plugin contains an insecure deserialization vulnerability in the Psr16CacheAdapter component. The root cause is the use of PHP's native unserialize() function without restricting allowed classes when retrieving data from the cache. An attacker with the ability to write man...
EUVD-2026-93363
CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...
CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin
CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...
PT-2026-106707
CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...
CVE-2021-33026
CVE-2021-33026 Serialización Pickle para Ejecución Remota de Código - Exploit PoC de Envenenamiento de Memcached ¿Qué es CVE-2021-3306? "La extensión Flask-Caching hasta la versión 1.10.1 para Flask utiliza Pickle para la serialización, lo que puede provocar una ejecución remota de código o una...
Zimbra Collaboration Suite - Memcached Command Injection
Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...
Rocky Linux 9 [CIQ] Security Update: memcached / memcached-debuginfo / memcached-debugsource / etc (crlsa-2026_27862)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627862 advisory. memcached: memcached: Username enumeration via timing side channel CVE-2026-47783 Tenable has extracted the preceding description block directly from the CIQ...
Rocky Linux 10.2 [CIQ] Security Update: memcached / memcached-debuginfo / memcached-debugsource / etc (crlsa-2026_27842)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627842 advisory. memcached: memcached: Username enumeration via timing side channel CVE-2026-47783 Tenable has extracted the preceding description block directly from the CIQ...
AlmaLinux 9.2 [TuxCare] Security Update: apr-util / apr-util-bdb / apr-util-devel / apr-util-ldap / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786553851)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786553851 advisory. - APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords...
AlmaLinux 9.2 [TuxCare] Security Update: memcached / memcached-devel / memcached-selinux (ALMALINUX9.2:CLSA-2026:1783635895)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783635895 advisory. - In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon ...
Rocky Linux 8 [CIQ] Security Update: apr-util / apr-util-bdb / apr-util-bdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_69113)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669113 advisory. apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client CVE-2026-34501 apr-util: Apache Portable Runtime Utility: Information...
AlmaLinux 9.2 [TuxCare] Security Update: memcached / memcached-devel / memcached-selinux (ALMALINUX9.2:CLSA-2026:1779095842)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779095842 advisory. - Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file...
AlmaLinux 9.6 [TuxCare] Security Update: memcached / memcached-devel / memcached-selinux (ALMALINUX9.6:CLSA-2026:1783629498)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783629498 advisory. - In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon ...
AlmaLinux 9.6 [TuxCare] Security Update: apr-util / apr-util-bdb / apr-util-devel / apr-util-ldap / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786481279)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786481279 advisory. - A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from...
Rocky Linux 9.6 [TuxCare] Security Update: apr-util / apr-util-bdb / apr-util-devel / apr-util-ldap / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786481279)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786481279 advisory. - A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from...