116 matches found
CVE-2026-21962
🔥 CVE-2026-21962 — Oracle HTTP Server Detection Toolkit Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962. 🧠 Vulnerability Overview CVE: CVE-2026-21962 Severity: Critical Attack Vector: Network Authentication...
CVE-2026-50751
CVE-2026-50751 Escáner IKEv1 de Check Point Un escáner de vulnerabilidades multihilo para CVE-2026-50751 , una vulnerabilidad crítica de omisión de autenticación IKEv1 que afecta a los Check Point Quantum Security Gateways. Resumen Los sistemas VPN de acceso remoto de Check Point con IKEv1...
CVE-2021-44228
CVE-2021-44228 On December 9, 2021, the world became aware of a new security vulnerability concerning Log4J. The CVSSv3 Common Vulnerability Scoring System score of the vulnerability was assessed as 10, making it critical https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 Its CVSSv3 vector i...
CVE-2022-21907
CVE-2022-21907 描述 - CVE-2022-21907 的 POC：HTTP 协议栈远程代码执行漏洞。 - 由 antx 于 2022-01-17 创建。 详情 - HTTP 协议栈远程代码执行漏洞。 - 类似于 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166。 - 该问题自去年在 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166 中报告以来，仍然存在。 CVE 严重性 - attackComplexity: LOW -...
CVE-2026-83206
Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...
CVE-2022-21907
CVE-2022-21907 描述 root@kitploit: CVE-2022-21907 的 PoC：HTTP 协议栈远程代码执行漏洞。 Malwareman 于 2022-09-17 创建。 详情 root@kitploit: HTTP 协议栈远程代码执行漏洞。 类似于 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166。 该问题自去年在 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166 中报告以来一直存在，至今仍未修复。 CVE 严重性...
windows-smb-vulnerability-framework-cve-2025-33073
Windows SMB 客户端漏洞研究框架 作者： cyberseallll 创建时间： 2025 概述 我开发了这个研究框架，用于分析和理解 CVE-2025-33073，这是一个严重的 Windows SMB 客户端权限提升漏洞。该实现为漏洞研究和受控测试环境提供了全面的工具。 漏洞详情 CVE-2025-33073 是一个可通过网络访问的权限提升漏洞，影响 Windows SMB 客户端实现。该漏洞源于 SMB 协议栈中不正确的访问控制机制。 技术规格 CVSS 评分 ：8.8（高危） 漏洞类型 ：CWE-284（访问控制不当） 攻击向量 ：网络 影响 ：权限提升 用户交互 ：无...
CVE-2026-78439
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73241
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73047
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69875
CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...
EUVD-2026-73041
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69491
CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...
EUVD-2026-73219
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
Linux Distros Unpatched Vulnerability : CVE-2026-82209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...
Fedora 44 : subfinder (2026-6f9cef7bfe)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f9cef7bfe advisory. Update to 2.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
CVE-2026-55642
In dbx-web before 0.5.51, auth_middleware in crates/dbx-web/src/auth.rs bypasses authentication when password_hash is None, which occurs on fresh deployments with DBX_PASSWORD unset. The service binds to 0.0.0.0:4224 by default, allowing unauthenticated attackers to call /api/connection/connect a...
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...