Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: kbld, crossplane-provider-aws-sesv2-fips, cluster-api-azure-controller, databricks-cli-fips, external-dns-fips, dapr, crossplane-provider-aws-devicefarm-fips, sriov-network-device-plugin, kubernetes-event-exporter, scuttle, listmonk, prometheus-bind-exporter,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, kyverno-policy-reporter-ui-fips, syncthing-fips, frp, ipfs-cluster-fips, kargo, q, kubernetes-dns-node-cache, syncthing, traefik-fips, dkron-fips, coredns, eks-distro, dkron, kubernetes-dns-node-cache-fips, caddy-fips, teleport, kubo, kubo-fips, spegel,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: go-discover, terraform-provider-azurerm, flux-fips, glab, zot, cluster-api-azure-controller, step-issuer-fips, gitlab-rails-ce, teleport-operator-fips, falcoctl-fips, docker-machine-driver-harvester, kubescape-server-fips, minio, gitea, opentofu-fips, falco-no-driver...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-fips, zot, gitlab-rails-ce, docker-machine-driver-harvester, kubescape-server-fips, minio, gitea, opentofu-fips, falco-no-driver, cilium-cli, external-secrets-operator-fips, drone-fips, reports-server, knative-eventing-fips, harbor, kine,...

SUSE: Security Advisory (SUSE-SU-2026:1320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-c718defeb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, smokescreen, fuse-overlayfs-snapshotter, argo-rollouts, kor, newrelic-nri-statsd, aws-network-policy-agent,...

Slackware: Security Advisory (SSA:2026-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2026:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-fe96f3532b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

PT-2026-29029

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

IngEstate Server v11.14.0 is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities within the Edit feature of the Software Package List page. The root cause is the improper neutralization of input, specifically via the About application , What's news , or Release note parameter...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...