EUVD-2026-93302

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

CVE-2026-98174

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

EUVD-2026-93102

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

CVE-2026-44262-

Este repositorio no tiene un README...

CVE-2026-94293

The aas-edge-client REST API is vulnerable to a missing authentication flaw for critical functions. An unauthenticated remote attacker can perform PATCH requests to modify Asset Administration Shell submodel data and use GET endpoints to read all exposed data. No specific exploit details or remed...

CVE-2026-94293 Missing authentication for critical function in the aas-edge-client REST API

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

CVE-2026-94293 Missing authentication for critical function in the aas-edge-client REST API

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

CVE-2026-19598

Ce depot n’a pas de fichier README...

CVE-2026-46558

CVE-2026-46558 El subsistema de activos V2 de Plane confiaba en slugs de espacios de trabajo y UUIDs de activos sin aplicar las comprobaciones de membresía correctas, lo que permitía a un usuario autenticado leer, copiar, eliminar y sobrescribir activos en otros espacios de trabajo. Introducción...

CVE-2026-39987-PoC

CVE-2026-39987 PoC Summary Marimo = 0.20.4 is affected by a pre-authentication RCE vulnerability in the /terminal/ws WebSocket endpoint. The endpoint checks the application mode and terminal support, but does not validate authentication before accepting the WebSocket connection. It then creates a...

cve-2023-35788

This repository does not have a README...

FlashHax

Este repositorio no tiene un README...

CVE-2022-31983

Este repositorio no tiene un README...

cve-2022-25927

Este repositorio no tiene un README...

WPMobileApp-AuthBypass-exploit

CVE-2026-94541 WPMobile.App 11.82 Missing Authorization to Pus...

CVE-2026-105486

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-20253

Splunk Enterprise — Laboratorio de Entrenamiento CVE-2026-20253 Splunk Enterprise 10.2.3 · sidecar de recuperación PostgreSQL · CWE-306 Autenticación faltante para función crítica Una reproducción autorizada y autocontenida que modela el aviso real para educación defensiva. No incluye código...

CVE-2022-3942

CVE-2022-3942 Cross Site Scripting en Sanitization Management System Descripción: Una vulnerabilidad de cross-site scripting XSS en Sanitization Management System v1.0 permite a posibles atacantes ejecutar scripts web arbitrarios o HTML mediante un payload especialmente diseñado inyectado en los...

CVE-2024-25381

This repository does not have a README...

CVE-2026-105486

The OSSRS srs software (up to version 7.0-a1 ) contains a vulnerability in the System API component. Specifically, the systemAPI.Run function within the internal/proxy/api.go file lacks proper authentication, allowing for remote manipulation. Public exploits for this vulnerability are currently a...