193561 matches found
EUVD-2026-124182
A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-74857
A missing critical step in authentication vulnerability exists in the Auth API of Synology DiskStation Manager (DSM) . This flaw affects versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . Remote authenticated users can exploit this vulnerability to read or write arbitrary files and perform denia...
CVE-2026-18792
The Synology DiskStation Manager (DSM) is affected by an improper limitation of a pathname to a restricted directory vulnerability within the Sharing API . This flaw exists in versions prior to 7.3.2-86009-5 and 7.4.1-90080-5 . Remote authenticated users can exploit this to read or write arbitrar...
CVE-2026-18792
An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...
EUVD-2026-124181
An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-13672
An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...
EUVD-2026-124180
An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-13672
Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-5 are vulnerable to an authorization bypass via a user-controlled key in the SSOAuth component. This vulnerability allows remote authenticated users to read or write arbitrary files and perform denial-of-service (DoS...
CVE-2026-85769
CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...
perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting
A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...
Important: Red Hat Security Advisory: perl-DBI security update
An update for perl-DBI is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2015-8710
Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...
Rogue-MySql-Server
Rogue-MySql-Server Edit script and change file to read and server port if you want. Run script and connect to your server for read file from client side. Read mysql.log for readed file content...
CVE-2021-40154
CVE-2021-40154 LPC55S69 and K82 USB In-System Programming ISP Buffer Over Read Vulnerabilities POC to test the BootROM vulnerability found in LPC55S69 and K82 Series Revision A2. The vulnerability is fixed in newer devices with newe Revision A3 for LPC55S69. Vulnerable Devices: Confirmed: LPC55S6...
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
A flaw was found in the Linux kernel's Server Message Block SMB client. The coalescet2 function processes server-supplied DataOffset fields without proper validation against buffer boundaries. A remote attacker could exploit this by crafting malicious SMB responses. This could lead to out-of-boun...
kernel: sctp: validate cookie AUTH state before use
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. When cookie authentication is disabled, the system improperly validates authentication AUTH fields restored directly from peer-controlled cookie bytes. A local attacker could exploit this by forging RANDOM lengths o...
dirtypipe
About: Title: DirtyPipe Description: Exploit for a new Linux vulnerability known as 'Dirty PipeCVE-2022-0847' allows local users to gain root privileges. AUTHOR: drapl0n Version: 1.0 Category: Execution Target: Linux operating systems. Attackmodes: HID, Storage DirtyPipe: Exploit for a new Linux...
CVE-2026-125703
A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing...
CVE-2020-5902
CVE-2020-5902 Auto exploit RCE CVE-2020-5902 F5 BIG-IP RCE + READ FILE Dorks : http.title:"BIG-IP®- Redirect" Using shodan.io...
GrafTraverse-CVE-2021-43798
GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework Command-line automation tool for authorized security testing of Grafana Directory Traversal CVE-2021-43798. Overview CVE-2021-43798 is an unauthenticated directory traversal vulnerability in Grafana 8.x that allows attackers to read...