EUVD-2026-66348

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

CVE-2026-9668

With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will consequently lead to slow database queries and expanded query coverage. This vulnerability features a low exploitati...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 security and extras update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-9668

CVE-2026-9668 is a SQL injection vulnerability in the ZTE SCP product. An attacker holding legitimate user credentials can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries, resulting in slow queries and expanded query coverage. The vulnerabi...

CVE-2026-14662

A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...

CVE-2018-25031-PoC

...

CVE-2020-1362

Ausnutzung eines Rechteerweiterungsfehlers in Windows 10 CVE-2020-1362 Ausnutzung eines Speicherkorruptionsfehlers – Analyse von CVE-2020-1362 Im letzten Patch Tuesday hat WalletService Rechteerweiterungsfehler behoben, einer der Fehler wurde mit CVE-2020-1362 gekennzeichnet. Der Fehler nutzt ein...

CVE-2023-39539-PoC

CVE-2023-39539-PoC PoC per CVE-2023-39539 in Cacti 1.2.22...

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment Questa vulnerabilità influisce sulla disponibilità del dispositivo e sul funzionamento affidabile di Atomberg Erica Smart Fan Firmware Version 1.0.36. Il problema sorge a causa della mancanza di meccanismi di protezione contro frame di...

poc-CVE-2024-10220

poc-CVE-2024-10220 CVE-2024-10220 POC...

BIG-IP-F5-TMUI-RCE-Vulnerability

BIG-IP-F5-TMUI-RCE-Vulnerabilità CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerabilità RCE PoC/ Script di test...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow nei Router Tenda HG7 / HG9 / HG10 📖 Panoramica CVE-2026-11499 è una vulnerabilità di stack-based buffer overflow segnalata che colpisce diversi modelli di router Tenda , tra cui: HG7 HG9 HG10 Un exploit riuscito potrebbe consentire a un attaccante di...

CVE-2017-3506

Cos'è questo? Questo è un proof of concept per CVE-2017-3506 serializzazione XMLDecoder di Weblogic Come usarlo? controllo vulnerabilità root@kitploit: java -jar WebLogic-XMLDecoder.jar -u http://192.168.174.144:7001 GetShell root@kitploit: java -jar WebLogic-XMLDecoder.jar -s...