EUVD-2026-93315

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211pernetexit moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can fai...

CVE-2026-98330 wifi: cfg80211: get the wiphy out of a dying network namespace

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211pernetexit moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can fai...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2026-23744

CVE-2026-23744 CVE-2026-23744 RCE While analyzing this vulnerability, I discovered that MCPJam Inspector exposed the /api/mcp/connect endpoint to the network by binding to 0.0.0.0. This endpoint accepts a JSON object containing serverConfig, including the fields command and args. The application...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

CVE-2025-24071

CVE-2025-24071 CNA: Microsoft Corporation Published: 2025-03-11 Updated: 2025-03-13 Title: Microsoft Windows File Explorer Spoofing Vulnerability Description Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing ove...

etherleak-checker

Etherleak Vulnerability Checker This Python script helps to detect the Etherleak CVE-2003-0001 vulnerability on a target host by analyzing the padding data in network packets. The script uses Scapy to send various types of requests ICMP, ARP, or TCP and checks if the responses contain any padding...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

CVE-2026-86950

🛡️ CVE-2026-86950 — CoreGraphics Security Research 🔬 Defensive Security Research • Vulnerability Analysis • Detection 📌 Overview CVE-2026-86950 is a high-severity vulnerability affecting Apple's CoreGraphics component. The vulnerability is classified as an out-of-bounds write CWE-787 and can...

trippy

Trippy combines the functionality of traceroute and ping and is designed to assist with the analysis of networking issues. Quick Start See the getting started guide. Install Trippy runs on Linux, BSD, macOS, and Windows. It can be installed from most package managers, precompiled binaries, or...

chanleakcheck

chanleakcheck This a tool to check if your lnd node was targeted by CVE-2019-12999, which was recently fully disclosed on. The tool will check if your node accepted an invalid channel, as well as attempt to quantify the total amount of lost coins, if any. Note that this tool is only for lnd,...

CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE Exploit ⚠️ AVISO LEGAL Esta herramienta es SOLO para pruebas de seguridad autorizadas y fines educativos. El uso no autorizado es ilegal. Los usuarios asumen toda responsabilidad por sus acciones. 📋 Resumen Este repositorio contiene una prueba de concepto del...

CLEANSTART-2026-GG28030 Netty is an asynchronous, event-driven network application framework

Security vulnerability affects the sonarqube package. Netty is an asynchronous, event-driven network application framework...

CLEANSTART-2026-IG66141 Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces

Security vulnerability affects the rundeck package. Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces...

EUVD-2026-92873

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates A critical RCE vulnerability in Windows TCP/IP stack CVE-2025-26686 leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now By Mark Mallia Type: Remote Code...

CVE-2026-105762

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...

CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-105743

A flaw was found in docling. A remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by providing crafted URLs when remote resource fetching is enabled. Incomplete validation allows requests to be resolved again by the network client, enabling techniques such as Domain Name...