Lucene search
+L

601 matches found

Kitploit
Kitploit
added 2026/09/19 4:15 a.m.119 views

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 10:45 p.m.15 views

param-miner

param-miner 이 확장 기능은 숨겨진, 연결되지 않은 파라미터를 식별합니다. 특히 웹 캐시 중독 취약점을 찾는 데 유용합니다. Backslash Powered Scanner의 고급 diffing 로직과 이진 탐색 기법을 결합하여 요청당 최대 65,000개의 파라미터 이름을 추측합니다. 파라미터 이름은 신중하게 선별된 내장 워드리스트에서 가져오며, 모든 인스코프 트래픽에서 추가 단어를 수집합니다. 사용하려면 Burp에서 요청을 마우스 오른쪽 버튼으로 클릭하고 "Guess cookies|headers|params"를...

5.7AI score
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/64: The jump labels are called before parseearlyparam is executed. On 64-bit systems, calling jumplabelinit within setupfeaturekeys is too late because static keys may be used in subroutines of parseearlyparam, which in...

5.5CVSS6AI score0.00244EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip – fixed a mismatch in operations on the sglsgenr variable. KASAN reported this bug as follows: 17619.659757 BUG: KASAN: Global-out-of-bounds condition in paramgetint+0x34/0x60. 17619.673193 A size 4 read was...

5.7AI score0.00239EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 2:45 p.m.12 views

CVE-2024-44623

CVE-2024-44623 SPX-GC 1.3.0v 以下のバージョンでは、childprocess モジュールの exec 関数にユーザー制御の入力がサニタイズなしで渡され、認証なしのブラインドリモートコード実行(Blind RCE)が発生します。 脆弱性 /routes/routes-api.js では、file パラメータから受け取ったユーザー入力が childprocess の exec 関数に渡され、認証なしのブラインド RCE が発生します。 ブラインドRCE Web アプリケーションにおけるブラインドリモートコード実行(Blind...

9.8CVSS6.7AI score0.0116EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/09/05 12:31 a.m.10 views

EUVD-2026-71790

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

7.1CVSS5.4AI score0.00244EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/04 11:18 p.m.5 views

CVE-2026-86097

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

7.1CVSS0.00244EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/04 10:38 p.m.4 views

CVE-2026-86097 PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

7.1CVSS5.7AI score
SaveExploits0References7
CVE
CVE
added 2026/09/04 10:38 p.m.17 views

CVE-2026-86097

PX4 Autopilot through 1.17.0 contains a null pointer dereference in the param_set_default_file() and param_set_backup_file() functions. An attacker with access to any PX4 shell can trigger the crash by issuing param select or param select-backup with no path argument , causing the autopilot proce...

7.1CVSS5.4AI score0.00244EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/04 10:38 p.m.35 views

CVE-2026-86097 PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

7.1CVSS0.00244EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.17 views

PT-2026-86267

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param set default file and param set backup file functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any P...

7.1CVSS5.3AI score0.00244EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/01 2:09 a.m.15 views

EUVD-2026-68930

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ash-project ashtypescript allows an attacker who controls a path-parameter value to redirect a generated client's request, and the credentials attached to it, to an unintended route or an external origin. The URL builders in...

2.3CVSS5.9AI score0.00288EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in ffmpeg, ffmpeg5

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideoenc.c:1216:21 in loadinputpicture in FFmpeg7.0...

7.8CVSS6.8AI score0.00355EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: LSM: General protection fault in legacyparseparam The usual LSM hook mechanism of “bailing on failure” doesn’t work in cases where a security module returns an error code indicating that it doesn’t recognize an input. In this...

5.5CVSS6.1AI score0.00264EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/16 12:02 a.m.42 views

OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...

5.3AI score
SaveExploits0References1
CVE
CVE
added 2026/08/10 1:42 p.m.64 views

CVE-2026-63106

ReadyEcommerce prior to 4.5.2 exposes an unauthenticated SQL injection in the product listing API: the rating parameter is concatenated into a MySQL HAVING clause in ProductController.php, enabling time-based blind SQL injection to exfiltrate full database contents (including user credentials and...

9.8CVSS5.7AI score0.00292EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/10 1:20 p.m.10 views

CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

0.002EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/10 1:20 p.m.23 views

UBUNTU-CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

5.2AI score0.002EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/10 1:20 p.m.8 views

UBUNTU-CVE-2026-68243

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915CONTEXTPARAMSSEU Setting context engine slot N into I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE and attempting to apply I915CONTEXTPARAMSSEU to the same slot N will deref NULL. Fix that...

5.2AI score0.00172EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/10 12:04 p.m.16 views

EUVD-2026-55580

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOADCONNPARAM queued update MGMTOPLOADCONNPARAM queues connupdatesync when a single parameter update changes an existing LE central connection. The queued work currently stores a borrowed hciconnparams...

5.4AI score0.00125EPSS
SaveExploits0References4
Rows per page
Query Builder