Mini_httpd-CVE-2018-18778

Vulnérabilité de lecture de fichier arbitraire dans minihttpd CVE-2018-18778 Minihttpd est un serveur HTTP minimaliste qui maintient un certain niveau de performance environ 90 % d'Apache tout en utilisant peu de ressources système. Il est donc largement utilisé comme serveur embarqué dans divers...

cve-2021-4034-mock

CVE-2021-4034 PwnKit Mock Vulnerability System Этот проект представляет собой имитационную систему, воспроизводящую ключевой принцип действия уязвимости CVE-2021-4034 Out-of-Bounds Read/Write в демоне pkexec для Linux. Без реального повышения привилегий SUID, в контролируемой среде безопасно...

CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2026-105251

The vgmstream software, specifically versions up to r2117 , contains an out-of-bounds read vulnerability in the VAG File Handler component. The issue originates from the ps_find_padding function within the src/coding/psx_decoder.c file. An attacker can trigger this vulnerability remotely through ...

EUVD-2026-92283

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2025-24963

CVE-2025-24963 - Режим браузера Vitest - Чтение локального файла CVE-2025-24963 — это уязвимость средней степени серьезности оценка CVSS 3.1: 5.9, затрагивающая пакет @vitest/browser, компонент фреймворка тестирования Vitest на основе Vite. Эта уязвимость возникает из-за неправильной проверки...

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

CVE-2024-23897

CVE-2024-23897 — Произвольное чтение файлов в Jenkins CLI Быстрый старт 1. Запустите лабораторию docker-compose up -d 2. Подождите 30 секунд, затем скачайте CLI-инструмент curl -O http://localhost:8080/jnlpJars/jenkins-cli.jar 3. Эксплойт — чтение /etc/passwd полный файл java -jar jenkins-cli.jar...

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

EUVD-2026-92265

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

CVE-2025-63602

CVE-2025-63602 Раскрытие информации о CVE-2025-63602, включающее PoC для использования небезопасного драйвера в Awesome Miner 11.2.4, приводящее к произвольному чтению/записи ядра в MSRs, что приводит к выполнению кода в режиме ядра...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.326 Vulnerability Details CVEID:CVE-2026-63383 DESCRIPTION: Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a...

FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure

A flaw was found in FreeRDP, where an out-of-bounds read vulnerability exists in the rdpdrdumppacket function. This is due to a 32-bit unsigned integer wraparound during buffer bounds validation. A malicious RDP server can send a specially crafted RDPDR packet, bypassing security checks and causi...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the URBDRC USB device redirection channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to...

mod_auth_openidc: mod_auth_openidc: Denial of Service via malformed state cookie parsing

A flaw was found in modauthopenidc, an OpenID Connect Relying Party module for Apache HTTP servers. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request with a malformed state cookie. This can lead to an out-of-bounds read and a one-byte out-of-bounds write...

CVE-2025-69080

Эксплойт LFI в теме Gecko CVE-2025-69080 Неаутентифицированная уязвимость локального включения файлов LFI в теме Gecko для WordPress = 1.9.8 ⚠️ Описание Данный эксплойт нацелен на уязвимость локального включения файлов высокой степени серьёзности CVSS 8.1 в теме JanStudio Gecko для WordPress...

CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read For authorized penetration testing and Red Team operations only. Unauthorized use constitutes a criminal offense. See Legal Notice. Overview CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability in GitLab Community and Enterprise...

CVE-2026-26980

CVE-2026-26980 — 👻 Ghost CMS: неаутентифицированная SQL-инъекция через Content API Уязвимость SQL-инъекции в Content API Ghost позволяла неаутентифицированным злоумышленникам читать произвольные данные из базы данных. | ---|--- CVE| CVE-2026-26980 CVSS| 9.4 критический Затронутые версии| Ghost =...