Lucene search
+L

82 matches found

Kitploit
Kitploit
•added 2026/10/01 8:52 p.m.•14 views

UPnP-Pentest-Toolkit

UPnP Pentest Toolkit This tool aims to bring together a range of UPnP assessment features, enabling quick assessment with minimal configuration and set-up. It has been developed to aid security consultants in exploring, spoofing and manipulating of UPnP devices and the underlying protocols at wor...

5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:17 p.m.•20 views

CVE-2026-6328

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.5AI score0.00225EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/17 6:31 p.m.•20 views

EUVD-2026-22832

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.8AI score0.00225EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/15 4:17 a.m.•20 views

CVE-2026-6328

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/15 3:18 a.m.•48 views

CVE-2026-6328 XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/15 3:18 a.m.•8 views

CVE-2026-6328 XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.8AI score0.00225EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/15 3:18 a.m.•9 views

CVE-2026-6328

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.8AI score0.00225EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/15 3:18 a.m.•16 views

CVE-2026-6328 XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•23 views

PT-2026-33006

Name of the Vulnerable Software and Affected Versions XQUIC versions prior to 1.8.3 Description Improper input validation and improper verification of cryptographic signatures in the QUIC protocol implementation, specifically within the packet processing module and STREAM frame handler modules,...

8.3CVSS5.4AI score0.00225EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/15 12:00 a.m.•1 views

CVE-2026-6328: Improper Input Validation

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.8AI score0.00225EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/15 12:00 a.m.•23 views

XQUIC 安全漏洞

XQUIC is an open-source cross-platform implementation code base for QUIC and HTTP/3 protocols developed by Alibaba. Versions of XQUIC 1.8.3 and earlier contain security vulnerabilities. These vulnerabilities stem from improper input validation and encryption signature verification, which may lead...

8.3CVSS5.9AI score0.00225EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:16 p.m.•15 views

CVE-2026-2298

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026...

9.4CVSS5.8AI score0.00413EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/23 9:30 p.m.•13 views

EUVD-2026-14512

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026...

5.8AI score0.00413EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/23 7:54 p.m.•38 views

CVE-2026-2298

Salesforce Marketing Cloud Engagement versions prior to January 30th, 2026 , are vulnerable to an Argument Injection vulnerability caused by the improper neutralization of argument delimiters in a command. This flaw allows for Web Services Protocol Manipulation . To remediate this issue, users sh...

9.4CVSS5.8AI score0.00413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•25 views

PT-2026-27201

Name of the Vulnerable Software and Affected Versions Salesforce Marketing Cloud Engagement versions prior to January 30, 2026 Description Improper neutralization of argument delimiters in a command, known as argument injection, allows for Web Services Protocol Manipulation. Recommendations Updat...

9.4CVSS5.8AI score0.00413EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•3 views

CVE-2026-2298: Improper Neutralization of Argument Delimiters in a Command

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026...

9.4CVSS5.8AI score0.00413EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/06 7:45 p.m.•14 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00345EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/05 6:31 p.m.•17 views

EUVD-2026-9838

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.9AI score0.00345EPSS
SaveExploits1References2
NVD
NVD
•added 2026/03/05 4:16 p.m.•35 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS0.00345EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/03/05 3:38 p.m.•12 views

CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00345EPSS
SaveExploits1References3
Rows per page
Query Builder