116 matches found
CVE-2026-21962
🔥 CVE-2026-21962 — Oracle HTTP Server Detection Toolkit Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962. 🧠 Vulnerability Overview CVE: CVE-2026-21962 Severity: Critical Attack Vector: Network Authentication...
CVE-2026-50751
CVE-2026-50751 Escáner IKEv1 de Check Point Un escáner de vulnerabilidades multihilo para CVE-2026-50751 , una vulnerabilidad crítica de omisión de autenticación IKEv1 que afecta a los Check Point Quantum Security Gateways. Resumen Los sistemas VPN de acceso remoto de Check Point con IKEv1...
CVE-2022-21907
CVE-2022-21907 Descripción - POC para CVE-2022-21907: Vulnerabilidad de ejecución remota de código de la pila de protocolo HTTP. - Creado por antx en 2022-01-17. Detalle - Vulnerabilidad de ejecución remota de código de la pila de protocolo HTTP. - Similar a...
CVE-2021-44228
CVE-2021-44228 El 9 de diciembre de 2021 el mundo conoció una nueva falla de seguridad relacionada con Log4J. La puntuación CVSSv3 Common Vulnerability Scoring System de la vulnerabilidad fue evaluada en 10, lo que la convierte en nivel crítico https://nvd.nist.gov/vuln/detail/CVE-2021-44228...
CVE-2026-83206
Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...
CVE-2022-21907
CVE-2022-21907 Descripción root@kitploit: POC para CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. Creado por Malwareman el 2022-09-17. Detalle root@kitploit: HTTP Protocol Stack Remote Code Execution Vulnerability. Similar a...
windows-smb-vulnerability-framework-cve-2025-33073
Windows SMB 客户端漏洞研究框架 作者： cyberseallll 创建时间： 2025 概述 我开发了这个研究框架，用于分析和理解 CVE-2025-33073，这是一个严重的 Windows SMB 客户端权限提升漏洞。该实现为漏洞研究和受控测试环境提供了全面的工具。 漏洞详情 CVE-2025-33073 是一个可通过网络访问的权限提升漏洞，影响 Windows SMB 客户端实现。该漏洞源于 SMB 协议栈中不正确的访问控制机制。 技术规格 CVSS 评分 ：8.8（高危） 漏洞类型 ：CWE-284（访问控制不当） 攻击向量 ：网络 影响 ：权限提升 用户交互 ：无...
CVE-2026-78439
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73241
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73047
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69875
CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...
EUVD-2026-73041
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69491
CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...
EUVD-2026-73219
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
Linux Distros Unpatched Vulnerability : CVE-2026-82209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...
Fedora 44 : subfinder (2026-6f9cef7bfe)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f9cef7bfe advisory. Update to 2.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
CVE-2026-55642
In dbx-web before 0.5.51, auth_middleware in crates/dbx-web/src/auth.rs bypasses authentication when password_hash is None, which occurs on fresh deployments with DBX_PASSWORD unset. The service binds to 0.0.0.0:4224 by default, allowing unauthenticated attackers to call /api/connection/connect a...
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...