2280 matches found
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Kerby
Summary Multiple vulnerabilities in Apache Kerby that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-57915 DESCRIPTION: It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or...
CVE-2026-15562 Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service
A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...
CVE-2026-15562
CVE-2026-15562 describes a vulnerability in EAP's jboss-remoting where a remote unauthenticated attacker who can access ports 8080, 9990, or 4447 and completes an Upgrade: jboss-remoting handshake can trigger out-of-memory errors, degrading server requests and causing denial of service. The CVSSv...
CVE-2026-15562 Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service
A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...
aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler
SummaryWebhookHandler.feedupdate deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expensive parsing of arbitrary JSON payloads that will ultimately be rejected, leading to unnecessary CPU and memory consumption. SeverityHig...
PYSEC-2026-3626 aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler
Summary WebhookHandler.feedupdate deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expensive parsing of arbitrary JSON payloads that will ultimately be rejected, leading to unnecessary CPU and memory consumption. Severity...
xss2shell
XSS2Shell — WordPress Pre-Auth XSS → RCE Chain PoC CVE-2026...
PT-2026-69560
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pre-authentication out-of-bounds read exists in the ceph handle caps function. The issue occurs because the function reads the snap trace len variable from the ceph mds caps header and...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 — GNU Inetutils telnetd Auth Bypass → Root Shel...
Exploit for CVE-2026-64638
🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behav...
Exploit for CVE-2026-64638
CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concep...
Exploit for CVE-2026-64638
CVE-2026-64638 Reflected XSS on Login Screen Leading to PH...
Exploit for CVE-2026-60004
CVE-2026-60004-p...
XSS2SHELL-POC
CVE-2026-64638 — XSS2Shell PoC Proof-of-concept tool for test...
Exploit for CVE-2026-64638
CVE-2026-64638 – XSS2Shell: WordPress login page pre-authentic...
Exploit for CVE-2026-64638
CVE-2026-64638 — XSS2Shell Pre-Authentication Reflected X...
Exploit for CVE-2026-64638
🛡️ CVE-2026-64638 - XSS2Shell WordPress Pre-Authentic...
CVE-2026-64638
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...