889673 matches found
CVE-2026-108545
SillyTavern versions 1.12.13 through 1.19.0 are vulnerable to a pre-authentication Denial of Service (DoS) . The root cause is that body-parser middleware executes before authentication and whitelist checks, allowing unauthenticated remote attackers to submit large or compressed JSON or urlencode...
EUVD-2026-96340
SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...
redis-stack-CVE-2024-55656
CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow Remote Code Execution Vulnerability Title: Redis Stack RedisBloom Integer Overflow Remote Code Execution Vulnerability ZDI: ZDI-25-009 CVE: CVE-2024-55656 Credits: rick2600 and gqsilva CVSS: 8.8 HIGH Affected version: RedisBloom v2.6.12...
CVE-2022-41114
CVE-2022-41114 Vulnerabilidad de elevación de privilegios del controlador de filtro de enlace de Windows. autenticación| complejidad| vector ---|---|--- no disponible| no disponible| no disponible confidencialidad| integridad| disponibilidad ---|---|--- no disponible| no disponible| no disponible...
CVE-2018-11235-poc
CVE-2018-11235-poc para la versión v2.7.4 Referencias 1.PoC de CHYbeta 2.CVE-2018-11235 - PoC rápida y sucia...
BIG-IP-F5-TMUI-RCE-Vulnerability
BIG-IP-F5-TMUI-RCE-Vulnerability CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerability RCE PoC/ Test Script...
EUVD-2026-96326
Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...
CVE-2026-94676
The Tainacan Community Tainacan WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This vulnerability affects versions from n/a through 1.3.0 . An attacker could potentially exploit this to perform unauthorized actions. No specific exploit links ...
CVE-2026-97263
The WPAdverts plugin by Greg Winiarski is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions up to and including 2.3.4 . Exploitation details are not provided in the documents.
CVE-2026-97263 WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through 2.3.4...
CVE-2026-94676 WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
EUVD-2026-96323
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
CVE-2026-105885 WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2026-105885
The Slider by 10Web WordPress plugin (versions
EUVD-2026-96322
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2026-102388
The WPMU DEV Forminator WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions 1.57.3 and below . The root cause is the improper neutralization of input during web page generation , which allows an attacker to store and execute malicious scripts. Exploitation details are ...
CVE-2019-11287
CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...
CVE-2026-98346
A flaw was found in the Linux kernel's wireless configuration subsystem cfg80211. When calculating beacon interval data, the system attempts to retrieve radio mask information for wireless devices that lack an associated network interface without proper validation. A local attacker can exploit th...
CVE-2025-29448
CVE-2025-29448 Descripción fallo en la lógica de reservas en Easy!Appointments v1.5.1 permite a atacantes no autenticados crear citas con duraciones excesivamente largas, causando una denegación de servicio al bloquear toda la disponibilidad futura de reservas. Pasos para Reproducir 1. Intercepta...