Lucene search
+L

127952 matches found

RedHat Linux
RedHat Linux
added 2026/09/10 6:09 a.m.7 views

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

5.3CVSS0.00485EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 6:09 a.m.7 views

kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done

A flaw was found in the Linux kernel. A remote attacker could exploit a use-after-free vulnerability in the Transparent Inter-Process Communication TIPC cryptographic decryption process. This flaw occurs when a network namespace, a mechanism for isolating network resources, is deallocated before ...

8.8CVSS0.00513EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 6:09 a.m.12 views

kernel: sctp: fix auth_hmacs array size in struct sctp_cookie

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. An incorrect array size calculation for the authhmacs field within the sctpcookie structure could lead to a buffer overflow. During the initialization of an SCTP association, if four HMAC identifiers...

8.1CVSS0.00475EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 6:09 a.m.7 views

kernel: sctp: diag: reject stale associations in dump_one path

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostics. When performing a socket diagnostic sockdiag lookup, the system may attempt to access memory related to an SCTP association that has already been freed. This can lead to an out-of-bounds read from...

7.1CVSS0.00126EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 6:09 a.m.7 views

kernel: netfilter: nf_log: validate MAC header was set before dumping it

A flaw was found in the Linux kernel's netfilter logging component. This vulnerability occurs because the system does not properly check if a network packet's Media Access Control MAC header is valid before attempting to log it. A local attacker could send a specially crafted network packet,...

7.1CVSS0.00128EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 6:09 a.m.11 views

kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this by sending a specially crafted COOKIEECHO chunk to a listening SCTP server. The server's failure to properly validate the length of a cached peer INIT chunk within...

9.8CVSS0.00442EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/10 6:01 a.m.6 views

RLSA-2026:65897 Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

7.5CVSS0.00302EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2026/09/10 6:01 a.m.12 views

qt5-qtbase security update

An update is available for qt5-qtbase. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing applications. The qt5-base package...

6.3CVSS0.00302EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:30 a.m.7 views

CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

Apache CXF XOP Include LFI CVE-2022-46364 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2022-46364 , a Local File Inclusion LFI vulnerability in Apache CXF. The vulnerability arises due to improper handling of XOP XML-binary Optimized Packaging Include elements in SOAP...

9.8CVSS6.8AI score0.02371EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 5:19 a.m.5 views

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 Una herramienta de seguridad basada en Python para detectar y explotar una vulnerabilidad de lectura arbitraria de archivos en el plugin WP File Upload de WordPress versiones = 4.24.11...

9.8CVSS8.4AI score0.93339EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 5:19 a.m.4 views

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth "Heartbleed" Exploitation Framework Author: Sastra Adi Wiguna Purple Elite Teaming Date: January 20, 2026 Version: 1.0 Full-System Replication License: RED TEAM USE ONLY Do not distribute...

8.3AI score
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.97 views

Cleo Harmony < 5.8.0.21 - Arbitary File Read

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution. id: CVE-2024-50623 info: name: Cleo Harmony 5.8.0.21 - Arbitary File Read author: DhiyaneshDK severity: high...

9.8CVSS8.3AI score0.98607EPSS
SaveExploits6References4
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.116 views

Adobe ColdFusion - Arbitrary File Read

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...

7.4CVSS8.2AI score0.98514EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.53 views

Grafana Post-Auth DuckDB - SQL Injection To File Read

The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...

9.9CVSS7.6AI score0.94864EPSS
SaveExploits11References3
NVD
NVD
added 2026/09/10 4:17 a.m.6 views

CVE-2026-18386

The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...

4.9CVSS0.00746EPSS
SaveExploits0References9
NVD
NVD
added 2026/09/10 4:17 a.m.12 views

CVE-2026-15019

The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the top-level include function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

7.5CVSS0.00676EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 3:54 a.m.6 views

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions. Run exploit root@kitploit: USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com Run nuclei template root@kitploit: echo https://target.com | nuclei...

9.8CVSS8.1AI score0.99984EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/10 3:41 a.m.5 views

CVE-2020-1938

Disclaimer: All use of cybersecurity tools must comply with national laws, industry regulations, and the relevant rules of the target system, and must not be used for any illegal purposes or to infringe upon the lawful rights of others. Users should recognize that no tool can guarantee absolute...

9.8CVSS7.3AI score0.9927EPSS
SaveExploits51
CVE
CVE
added 2026/09/10 3:40 a.m.22 views

CVE-2026-15019

Direct Download for WooCommerce (WordPress plugin) is vulnerable to directory traversal via the file_id path segment in the top-level include function, affecting all versions up to and including 1.19 . The root cause is that the product ownership check only verifies that some free, virtual, downl...

7.5CVSS0.00676EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/10 3:40 a.m.39 views

CVE-2026-15019 Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segment

The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the top-level include function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

7.5CVSS0.00676EPSS
SaveExploits0References6
Rows per page
Query Builder