Lucene search
+L

210 matches found

Kitploit
Kitploit
•added 2026/10/04 12:54 p.m.•14 views

CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch...

10CVSS7.7AI score0.99802EPSS
SaveExploits395
Snyk
Snyk
•added 2026/09/16 9:31 p.m.•9 views

Malicious Package

Overview strapi-plugin-os-rec is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/16 1:59 p.m.•23 views

Malicious code in strapi-plugin-os-rec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7f08345375bd52a25c34cc61a3e877c1a9f8f364a90a76b3a1eff55216ea03 postinstall.js runs automatically on npm install and collects host reconnaissance data — os.hostname, os.platform, os.arch, os.type, os.release, the...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/16 1:59 p.m.•13 views

MAL-2026-16234 Malicious code in strapi-plugin-os-rec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7f08345375bd52a25c34cc61a3e877c1a9f8f364a90a76b3a1eff55216ea03 postinstall.js runs automatically on npm install and collects host reconnaissance data — os.hostname, os.platform, os.arch, os.type, os.release, the...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•4 views

PT-2026-93387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the read log rec buf function within the NTFS3 file system. The issue occurs because the log-record header len value is taken directly from the on-disk...

8.4CVSS5.9AI score0.00196EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•8 views

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fixed invalid address access in lookuprec when the index is 0. KASAN reported the following issue: BUG: KASAN: use-after-free in lookuprec A read of size 8 at the address ffff000199270ff0 was performed by the task modprob...

7.8CVSS6.7AI score0.00206EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/21 5:17 p.m.•19 views

CVE-2026-24232

NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

4.3CVSS0.00379EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/21 4:07 p.m.•47 views

CVE-2026-24232

The CVE concerns NVIDIA Transformers4Rec, where improper deserialization of untrusted data is the root cause. This could allow code execution, data tampering, and information disclosure, as described in the CVE entry. The provided metrics indicate a low to medium impact with local attack vector a...

4.3CVSS7.2AI score0.00379EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/05/20 5:53 a.m.•12 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validated rec-used in the journal-replay file record check. The checkfilerecord function validates rec-total against the record size, but never validates rec-used. The doaction journal-replay handlers read rec-used from...

7.8CVSS5.8AI score0.00186EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/05/02 1:25 a.m.•32 views

SUSE CVE-2026-31716

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec-used in journal-replay file record check checkfilerecord validates rec-total against the record size but never validates rec-used. The doaction journal-replay handlers read rec-used from disk and use it to...

7.3CVSS5.7AI score0.00186EPSS
SaveExploits0References4
OSV
OSV
•added 2026/05/01 1:56 p.m.•16 views

CVE-2026-31716 fs/ntfs3: validate rec->used in journal-replay file record check

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec-used in journal-replay file record check checkfilerecord validates rec-total against the record size but never validates rec-used. The doaction journal-replay handlers read rec-used from disk and use it to...

7.8CVSS6.5AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2026/05/01 1:56 p.m.•52 views

CVE-2026-31716 fs/ntfs3: validate rec->used in journal-replay file record check

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec-used in journal-replay file record check checkfilerecord validates rec-total against the record size but never validates rec-used. The doaction journal-replay handlers read rec-used from disk and use it to...

7.8CVSS0.00186EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•23 views

PT-2026-36346

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the NTFS3 driver during journal-replay file record checks. The check file record function validates rec-total against the record size but fails to validate...

7.8CVSS7.3AI score0.00186EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•8 views

PT-2026-34691

lib/kadm5/kadm rpc xdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because xdr kadm5 principal ent rec does not validate the relationship between n key data and the key dat...

6.5CVSS6AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/03/17 12:00 a.m.•28 views

PT-2026-25839

A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This affects an unknown function of the file /rest/preSetTemplate/getRecByTemplateId. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The explo...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992926 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookuprec when index is 0 KASAN reported follow problem: BU...

7.8CVSS6.9AI score0.00206EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/23 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-34457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954, contain a stack- based buffer overflow vulnerability in the function...

8.7CVSS6.2AI score0.00509EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•10 views

PT-2025-52719

Name of the Vulnerable Software and Affected Versions wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954 Description The software contains a stack-based buffer overflow issue in the kiss rec byte function, found in src/kiss frame.c. Processing specially crafted KI...

8.7CVSS7.2AI score0.00509EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/12/22 12:00 a.m.•14 views

Dire Wolf 安全漏洞

Dire Wolf is a software radio modem from the individual developers at wb2osz. A security vulnerability exists in Dire Wolf 1.8 and earlier versions, which stems from a stack buffer overflow in the kissrecbyte function, which could result in stack memory corruption or an application crash...

8.7CVSS7AI score0.00509EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•17 views

PT-2025-50110

Name of the Vulnerable Software and Affected Versions NVIDIA Merlin Transformers4Rec for Linux affected versions not specified Description The NVIDIA Merlin Transformers4Rec software contains a flaw within the Trainer component that could allow a user to trigger a deserialization issue...

8.8CVSS6.7AI score0.00658EPSS
SaveExploits0References5
Rows per page
Query Builder