CVE-2022-21907

CVE-2022-21907 Description - PoC pour CVE-2022-21907 : vulnérabilité d'exécution de code à distance dans la pile de protocole HTTP. - créé par antx au 2022-01-17. Détail - Vulnérabilité d'exécution de code à distance dans la pile de protocole HTTP. - Similaire à...

CVE-2026-21962

🔥 CVE-2026-21962 — Набор инструментов для обнаружения Oracle HTTP Server Безопасные, неэксплуатирующие инструменты обнаружения для выявления экземпляров Oracle HTTP Server и WebLogic Proxy Plug-in, затронутых уязвимостью CVE-2026-21962. 🧠 Обзор уязвимости CVE: CVE-2026-21962 Серьёзность:...

windows-smb-vulnerability-framework-cve-2025-33073

Каркас исследования уязвимостей Windows SMB Client Автор: cyberseallll Создано: 2025 Обзор Я разработал этот исследовательский каркас для анализа и понимания CVE-2025-33073 — критической уязвимости повышения привилегий в Windows SMB Client. Данная реализация предоставляет комплексные инструменты...

CVE-2022-21907

CVE-2022-21907 Description root@kitploit: POC pour CVE-2022-21907 : Vulnérabilité d'exécution de code à distance dans la pile du protocole HTTP. créé par Malwareman le 2022-09-17. Détail root@kitploit: Vulnérabilité d'exécution de code à distance dans la pile du protocole HTTP. Similaire à...

CVE-2026-50751

Scanner CVE-2026-50751 Check Point IKEv1 Um scanner de vulnerabilidades multi-threaded para CVE-2026-50751 , uma vulnerabilidade crítica de bypass de autenticação IKEv1 que afeta os Check Point Quantum Security Gateways. Visão Geral Sistemas Check Point Remote Access VPN com IKEv1 habilitado são...

CVE-2021-44228

CVE-2021-44228 Am 9. Dezember 2021 erfuhr die Welt von einer neuen Sicherheitslücke in Log4J. Der CVSSv3-Score Common Vulnerability Scoring System der Schwachstelle wurde mit 10 bewertet, wodurch sie als kritisch eingestuft wird https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 Der zugehöri...

CVE-2026-55642

In dbx-web before 0.5.51, auth_middleware in crates/dbx-web/src/auth.rs bypasses authentication when password_hash is None, which occurs on fresh deployments with DBX_PASSWORD unset. The service binds to 0.0.0.0:4224 by default, allowing unauthenticated attackers to call /api/connection/connect a...

CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...

CVE-2026-16842

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-16919

CVE-2026-16919 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper validation of network-supplied pointers , allowing a remote, unauthenticated attacker to execute arbitrary code over the network. The CVSS 3.1 score is 9.8 (CRITICAL) with full impact on confidentiality,...

CVE-2026-73875

creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

vulnerabilities present in Oracle Java SE

Oracle has identified vulnerabilities in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. These vulnerabilities affect several supported versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthorized attacker with network...

CVE-2026-73866

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

CVE-2026-71050

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Product...

CVE-2026-71027

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2026-70994

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-70897

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2026-70893

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle...

CVE-2026-70890

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-70852

Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demand Planning...