DEBIAN-CVE-2026-109950

FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger than the NDR string ActualCount in consent or service messages...

Windows Message Queuing Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...

Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally...

Windows Message Queuing Queue Manager Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally...

Windows Message Queuing Queue Manager Denial of Service Vulnerability

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...

Windows Message Queuing Queue Manager Information Disclosure Vulnerability

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...

CVE-2026-109950

FreeRDP versions 3.0.0 through 3.31.x are vulnerable to a heap out-of-bounds read vulnerability when processing RD Gateway messages. The root cause is a mismatch in message lengths where an attacker controlling the gateway can set MsgBytes significantly larger than the NDR string ActualCount with...

CVE-2022-25813

CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz By inserting malicious content in a message’s “Subject” field, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote...

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress plugin - tutorial CalderaForm is a WordPress plugin that makes it easy to create forms via drag and drop. During a recent engagement I happened to test some portals, one of which hosted a contact form created with this plugin. The custom...

CVE-2020-15392

CVE-2020-15392 User Enumeration on Supravizio BPM 10.1.2 Description A user enumeration vulnerability flaw was found in Supravizio BPM, version 10.1.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,...

CVE-2026-54992-PoC

CVE-2026-54992 PoC Proof of concept for the Microsoft Message Queuing remote-read integer overflow tracked as CVE-2026-54992. The PoC uses two Windows VMs. A normal user on the vulnerable target asks the local MSMQ service to read from a queue hosted by the helper. The helper returns a malformed...

apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ Developer Guide This guide helps developers to understand and use Apache RocketMQ quickly. 1. Concepts & Features Concept：introduce basic concepts in RocketMQ. Feature：introduce functional features of RocketMQ's implementations. 2. Architecture Design Architecture：introduce...

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF Summary Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames. Referenced CVE record...

EUVD-2026-98043

Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common...

Microsoft Windows: CVE-2026-85860: Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85874: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...

PT-2026-112022

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use after free issue in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Use after free is a memory corruption flaw that occurs when a...

PT-2026-111630

Name of the Vulnerable Software and Affected Versions SFTPGo versions prior to 2.7.5 Description An authenticated SSH user can send a malformed protocol message during the channel opening process. This action triggers an unhandled error that terminates the server process, resulting in a denial of...