4937 matches found
CVE-2014-3570_G2.5_openssl_no_patch
此存储库没有 README。...
CVE-2020-16898_Checker
CVE-2020-16898Checker Verificar todas las interfaces de red para la vulnerabilidad CVE-2020-16898 No hay parche ni solución alternativa, para esta verificación usa este enlace: https://github.com/CPO-EH/CVE-2020-16898Workaround/blob/main/VCE-2020-16898QuickWin.ps1...
CVE-2023-52251-POC
CVE-2023-52251-POC There is a Remote Code Execution vulnerability provectus/kafka-ui. There is no patch as of writing this, but the vendor is notified by us and the team over at VINCE without any response. Report was sent Sep 27, 2023 to provectus both via email and github security. Remediation W...
CVE-2018-14881_no_patch
此存储库没有 README。...
Linux Distros Unpatched Vulnerability : CVE-2026-89157
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCRE2 before 10.48, on 32-bit platforms, has a pcre2patternconvert out-of-bounds write when an attacker can provide a large pattern. CVE-2026-89157 Note that...
CVE-2025-61456
🛡️ CVE Disclosure: CVE-2025-61456 — Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61456 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the index.php endpoint...
CVE-2026-38360
CVE-2026-38360:dash-uploader 中的路径遍历 未经身份验证的路径遍历影响 fohrloop/dash-uploader(Python,PyPI),可导致任意文件写入,进而(但不限于)实现 远程代码执行(RCE) 、应用程序源代码覆盖、存储型 XSS 以及持久后门安装。 ⚠️ 无补丁可用,且永远不会发布 该仓库已于 2025 年 7 月 19 日归档,没有活跃维护者。所有已发布版本(0.1.0 至 0.7.0a2)均受影响且将一直如此。该包每月仍有大约 28,000 次下载。 任何在生产环境中运行 dash-uploader...
CVE-2025-32433
CVE-2025-32433 Erlang/OTP SSH 服务器中存在一个严重漏洞,允许未经认证的远程代码执行 RCE。该缺陷存在于 SSH 协议消息处理机制中,使攻击者无需认证凭据即可执行任意命令。 影响 严重程度的漏洞,攻击者可能能够:- 绕过浏览器的沙箱保护 - 执行任意代码 - 破坏系统完整性 - 未经授权访问系统资源 此漏洞专门针对 Windows 上的 Firefox,并且已在野外被积极利用。如果 SSH 守护进程以 root 身份运行,攻击者将获得对该设备的完全访问权限 漏洞利用: 在此下载 详细信息 CVE ID : CVE-2025-32433 发布日期 :...
Linux Distros Unpatched Vulnerability : CVE-2026-87581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code...
framework_base_CVE-2023-21285_NoPatch
Este repositorio no tiene un README...
Linux Distros Unpatched Vulnerability : CVE-2026-80744
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftablesoffload: suppress WARNONONCE for ENOMEM in abort path In nftflowruleoffloadabort, WARNONONCEerr is triggered on every error during rollback,...
Linux Distros Unpatched Vulnerability : CVE-2026-85504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via...
Linux Distros Unpatched Vulnerability : CVE-2026-84121
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefo...
Linux Distros Unpatched Vulnerability : CVE-2026-40017
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD...
Linux Distros Unpatched Vulnerability : CVE-2026-40203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail an...
Linux Distros Unpatched Vulnerability : CVE-2026-19538
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TL...
Linux Distros Unpatched Vulnerability : CVE-2026-79225
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass syste...
Linux Distros Unpatched Vulnerability : CVE-2026-78962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin...
Linux Distros Unpatched Vulnerability : CVE-2026-79085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin...
Linux Distros Unpatched Vulnerability : CVE-2026-73638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libimager-perl - None Ubuntu Linux - Unknown description CVE-2026-73638 Note that Nessus relies on the presence of the package as reported by the...