95934 matches found
CVE-2026-80697
In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid fpath for page cache sharing Previously, backing files for page cache sharing were set up with fpath left as NULL only finode was valid. It worked, but a recent mincore fix relies on fpath.mnt and crashes foun...
EUVD-2026-67432
In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid fpath for page cache sharing Previously, backing files for page cache sharing were set up with fpath left as NULL only finode was valid. It worked, but a recent mincore fix relies on fpath.mnt and crashes foun...
CVE-2026-80697
CVE-2026-80697 affects the Linux kernel in the erofs (Enhanced Read-Only Filesystem) subsystem. Backing files for page cache sharing were previously set up with f_path left as NULL (only f_inode was valid). A recent mincore fix relies on f_path.mnt, triggering a kernel NULL pointer dereference an...
CVE-2026-80697 erofs: ensure valid f_path for page cache sharing
In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid fpath for page cache sharing Previously, backing files for page cache sharing were set up with fpath left as NULL only finode was valid. It worked, but a recent mincore fix relies on fpath.mnt and crashes foun...
CVE-2026-80697 erofs: ensure valid f_path for page cache sharing
In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid fpath for page cache sharing Previously, backing files for page cache sharing were set up with fpath left as NULL only finode was valid. It worked, but a recent mincore fix relies on fpath.mnt and crashes foun...
CVE-2026-80688
CVE-2026-80688 affects the Linux kernel on the RISC-V architecture. The vulnerable component is the function vec_check_unaligned_access_speed_all_cpus, which carries an __init annotation but executes within a kthread . If the SBI calls it makes are slow (e.g., due to debug output), the kthread ma...
CVE-2026-80688 riscv: drop __init from vec_check_unaligned_access_speed_all_cpus
In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...
CVE-2026-78238
SOY Gallery is affected by a cross-site scripting (XSS) vulnerability that allows arbitrary script execution in the web browser of a user who is logging in to the product. The vulnerability requires low privileges and active user interaction , with impact on subsequent system confidentiality and ...
CVE-2026-73827
SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...
CVE-2024-46878-TikiCMS-XSS
CVE-2024-46878 - Vulnerabilità di Cross-Site Scripting XSS Riflessa in Tiki CMS Tiki CMS - Vulnerabilità di Cross-Site Scripting XSS Riflessa nel parametro 'page' Disclaimer Destinato esclusivamente a scopi educativi, di ricerca e difensivi. L'uso non autorizzato contro sistemi senza permesso è...
what-wordpress
what-wordpress Strumento per estrarre tutti i temi e plugin mostrati nella pagina iniziale di un sito WordPress...
grafana-bruteforce
grafana-bruteforce Ein Tool, das eine Combo-Liste aus Benutzernamen und Passwörtern verwendet und versucht, die Grafana-Anmeldeseite per Brute-Force zu knacken. Grafana sperrt dich nach 5 Versuchen aus, daher musst du sicherstellen, dass dein Proxy über mehrere externe IPs verfügt. Ausführung...
CVE-2024-12594
CVE-2024-12594 ALL In One Custom Login Page input...
nexphisher
Project not maintained anymore. UseZPhisher Installation : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher SETUP : bash setup SETUP TERMUX : bash tmuxsetup Run : bash nexphisher Single Command : root@kitploit: apt update ; apt install git -y ; git...
authcov
AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...
CVE-2026-78615
A Reflected Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL...
WBCE-CMS-Stored-XSS---Pages-Menu
WBCE CMS Stored XSS v1.6.1 Autore: Sergio Descrizione: WBCE CMS 1.6.1 è affetto da una vulnerabilità di Cross-Site Scripting XSS persistente che consente agli attaccanti di eseguire codice arbitrario tramite un payload inserito nel parametro Intro Page del menu Pages. Il payload viene eseguito...
CVE-2022-48311
CVE-2022-48311 Vulnerabilità di Cross Site Scripting XSS nella pagina di configurazione HTTP della stampante HP Deskjet 2540 serie con versione firmware CEP1FN1418BR e numero modello prodotto A9U23B Descrizione Cross Site Scripting XSS nella stampante HP Deskjet 2540 serie con versione firmware...
CVE-2020-26733
CVE-2020-26733 SKYWORTH GN542VF Hardware-Version 2.0 und Software-Version 2.0.0.16 Cross-Site-Scripting XSS-Schwachstelle Beschreibung Cross-Site-Scripting XSS auf der Konfigurationsseite in SKYWORTH GN542VF Hardware-Version 2.0 und Software-Version 2.0.0.16 ermöglicht es einem authentifizierten...