Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, cadence, multicluster-controlplane-fips, azure-service-operator-fips, crossplane-provider-aws-ec2-fips, gitlab-runner-operator-fips, crossplane-provider-aws-redshift-fips, syft-fips, victoriametrics-operator, kubevirt-cdi-controller-fips...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: caddy-fips, k8sgateway, traefik-fips, kubernetes-dns-node-cache-fips, kubo-fips, kargo, dkron, ipfs-cluster-fips, kubo, ipfs-cluster, kubernetes-dns-node-cache, spegel, caddy, spegel-fips, traefik, q, syncthing, k8sgateway-fips, rke2-runtime, coredns, frp,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, chainloop-cli-fips, nfpm, prometheus, atlantis-fips, step-ca-fips, tflint, terragrunt, gatekeeper, docker-cli-buildx-fips, kubernetes-fips, kyverno, rancher, teleport-operator-fips, gh, neuvector-sigstore-interface, nuclei, spire-server, aactl,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, prometheus, gatekeeper, kyverno, kubernetes-fips, rancher, spire-server, aactl, elastic-agent-fips, argo-workflows-fips, terraform, opentofu, kubevela-fips, external-dns, cilium, kubescape, k9s, tekton-pipelines, upwind-agent, cloudbeat,...

SUSE: Security Advisory (SUSE-SU-2026:1320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-c718defeb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: clickhouse-operator, apisix-ingress-controller, tkn, nsc, grafana, sftpgo-plugin-geoipfilter, argo-cd, mockery, policy-controller, syft, direnv, local-path-provisioner, oras, s5cmd, kubernetes-csi-external-attacher, sftpgo, aws-signer-notation-plugin, gatus, calico,...

openSUSE Security Advisory (SUSE-SU-2026:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2026-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-fe96f3532b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

CVE-2026-30082 describes multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 . The issue allows an attacker to inject crafted payloads via the About application, What’s new, or Release note parameters to exe...

PT-2026-29029

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

Debian: Security Advisory (DLA-4510-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...