Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: metacontroller-fips, timoni, crossplane-provider-aws-docdb, volsync, neuvector-fips, prometheus-stackdriver-exporter, virt-api-fips, vault-secrets-operator-fips, amazon-ecs-cni-plugins, vault-env, weaviate, skopeo-fips, kubescape-server, omni-fips,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: rke2-runtime, caddy, kubo, coredns, dkron, kargo, k3s, caddy-fips, kyverno-policy-reporter-ui, frp, kubernetes-dns-node-cache-fips, traefik, spegel-fips, eks-distro-fips, ipfs-cluster, q, kubo-fips, syncthing, syncthing-fips, eks-distro, kubernetes-dns-node-cache,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, crossplane-provider-azure-storagesync, kubernetes, caddy, glab, external-secrets-operator-fips, kubescape, flux-fips, fscrypt, coder-fips, step-kms-plugin-fips, telegraf, crossplane-provider-azure-storagecache, crossplane-provider-azure-portal,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubernetes, external-secrets-operator-fips, kubescape, flux-fips, fscrypt, coder-fips, telegraf, opentofu, skaffold, zarf-fips, gitlab-workhorse-ce-fips, opentelemetry-collector, kots, knative-kafka-broker-fips, gatekeeper-fips, kubescape-server-fips, cloudbeat-fips,...

SUSE: Security Advisory (SUSE-SU-2026:1320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-c718defeb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kafkaexporter, cis-operator, nri-couchbase, chartmuseum, openbao, spire-controller-manager, kargo, consul-k8s, nri-rabbitmq, rabbitmq-default-user-credential-updater, kyverno-policy-reporter-ui, chezmoi, stern, mongo-tools, aws-application-networking-k8s,...

Slackware: Security Advisory (SSA:2026-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2026:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-fe96f3532b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

IngEstate Server v11.14.0 is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities within the Edit feature of the Software Package List page. The root cause is the improper neutralization of input, specifically via the About application , What's news , or Release note parameter...

PT-2026-29029

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...