Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, falcoctl, crossplane-provider-aws-budgets-fips, peerdb-flow-fips, crossplane-provider-aws-route53recoveryreadiness-fips, jaeger-operator-fips, nifikop, redpanda-operator, buildkitd-fips, nri-haproxy, deck-fips,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: kargo, kubo-fips, caddy, kubo, ipfs-cluster, k3s, dkron-fips, eks-distro-fips, spegel-fips, ipfs-cluster-fips, traefik-fips, rke2-runtime, k8sgateway, eks-distro, kyverno-policy-reporter-ui, spegel, kubernetes-dns-node-cache-fips, q, caddy-fips, traefik, frp,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-search, falcoctl, flux-image-automation-controller-fips, tkn-fips, consul, external-secrets-operator-fips, grype-fips, minio, tekton-pipelines-fips, gitlab-rails-ce-fips, crossplane-provider-azure-servicenetworking, gitlab-workhorse-ce, apko...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller-fips, external-secrets-operator-fips, tekton-pipelines-fips, minio, gitlab-rails-ce-fips, gitlab-workhorse-ce, chisel, knative-serving, snyk-cli, kubernetes-fips, external-dns, nemo, trivy-fips, cloud-provider-aws, prometheus, coder,...

SUSE: Security Advisory (SUSE-SU-2026:1320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-c718defeb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubebuilder, vendir, trillian, helm, gobuster, trivy-operator, pguser, sftpgo-plugin-eventstore, rancher-telemetry, seaweedfs, grafana-rollout-operator, gostatsd, newrelic-k8s-metadata-injection, terraform-mcp-server, nri-prometheus, harbor-scanner-trivy, ytt,...

Slackware: Security Advisory (SSA:2026-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2026:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-fe96f3532b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

PT-2026-29029

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

IngEstate Server v11.14.0 is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities within the Edit feature of the Software Package List page. The root cause is the improper neutralization of input, specifically via the About application , What's news , or Release note parameter...