734578 matches found
open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder
A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...
Important: Red Hat Security Advisory: isns-utils security update
An update for isns-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: isns-utils security update
An update for isns-utils is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder
A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...
CVE-2026-9668
With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will consequently lead to slow database queries and expanded query coverage. This vulnerability features a low exploitati...
Important: Red Hat Security Advisory: isns-utils security update
An update for isns-utils is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder
A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 security and extras update
Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...
CVE-2026-9668
CVE-2026-9668 is a SQL injection vulnerability in the ZTE SCP product. An attacker holding legitimate user credentials can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries, resulting in slow queries and expanded query coverage. The vulnerabi...
CVE-2026-14662
A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...
CVE-2018-25031-PoC
...
CVE-2023-39539-PoC
CVE-2023-39539-PoC PoC per CVE-2023-39539 in Cacti 1.2.22...
CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment
CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment Questa vulnerabilità influisce sulla disponibilità del dispositivo e sul funzionamento affidabile di Atomberg Erica Smart Fan Firmware Version 1.0.36. Il problema sorge a causa della mancanza di meccanismi di protezione contro frame di...
poc-CVE-2024-10220
poc-CVE-2024-10220 CVE-2024-10220 POC...
BIG-IP-F5-TMUI-RCE-Vulnerability
BIG-IP-F5-TMUI-RCE-Vulnerabilità CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerabilità RCE PoC/ Script di test...
CVE-2026-11499
🚨 CVE-2026-11499 Stack-Based Buffer Overflow nei Router Tenda HG7 / HG9 / HG10 📖 Panoramica CVE-2026-11499 è una vulnerabilità di stack-based buffer overflow segnalata che colpisce diversi modelli di router Tenda , tra cui: HG7 HG9 HG10 Un exploit riuscito potrebbe consentire a un attaccante di...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Panoramica CVE-2026-49975 è una vulnerabilità Denial of Service DoS in Apache HTTP Server. La vulnerabilità si verifica nel percorso di gestione delle richieste HTTP/2, dove più campi header cookie possono essere uniti senza essere...
CVE-2021-42008
CVE-2021-42008 CVE-2021-42008: Sfruttando una vulnerabilità di 16 anni nel driver Linux 6pack Analisi della vulnerabilità e sviluppo dell'exploit: https://syst3mfailure.io/sixpack-slab-out-of-bounds Exploit progettato per: root@kitploit: Debian 11 - Kernel 5.10.0-8-amd64...
CVE-2024-28987
CVE-2024-28987 Proof-of-Concept-Exploit für CVE-2024-28987: SolarWinds Web Help Desk – Schwachstelle durch fest codierte Anmeldedaten Übersicht Extrahiert bis zu 25 der aktuellsten Tickets API-Einschränkung Ruft vollständige Details für jedes Ticket ab Analysiert Ticket-IDs, um die Gesamtzahl der...