CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

EUVD-2026-72618

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-75810

ASUS Armoury Crate contains an exposed dangerous method or function that allows a local user to bypass driver authentication and send requests to trigger system management interrupts (SMIs) . A single trigger causes a brief system stall; repeatedly triggering SMIs can escalate to a denial-of-serv...

CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

EUVD-2026-72617

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

CVE-2026-86511

A resource consumption vulnerability exists in the java-json-tools jackson-coreutils 2.0 library, specifically in the BigDecimal.toPlainString function within the file JacksonUtils.java . A remote attacker with no authentication and low complexity can trigger this flaw to degrade availability. A ...

JndiLookup

JndiLookup Some tool to help analyzing Apache Log4j 2 CVE-2021-44228 This tool uses the "lookup" feature from log4j-2 to test against the JNDI vulnerability. The objective is to easily run the lookup feature to normalize logs for example or to do a real testing on some payload - please be cautiou...

log-horizon v0.9.0

Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 Este es un programa Java que explota la vulnerabilidad Spring Break CVE-2017-8046. Este software está escrito para tener la menor cantidad de dependencias externas posible. AVISO LEGAL Esta herramienta está destinada a ingenieros de seguridad y profesionales de appsec pa...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 Based on the original exploit from Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ credits to Aaron Herndon / https://twitter.com/ac3lives /...

CVE-2026-41940-analysis

CVE-2026-41940 — cPanel & WHM Pre-Authentication Root Bypass via Session-File CRLF Injection A Defender-Focused Technical Deep Dive 1. Executive Summary Field| Value ---|--- CVE ID| CVE-2026-41940 CVSS v3.1| 9.8 Critical — Network / Low Complexity / No Privileges / No User Interaction...

Mailcow-CVE-2022-31138

Mailcow CVE-2022-31138 RCE and Domain Admin privilege escalation for Mailcow. POC for CVE-2022-31245 can be modified to work with this vulnerability. Reported and fixed: 2022-06 Code Injection, RCE Type: Code Injection CWE-94, RCE, Domain Takeover Affected versions: least 2019 - 2022-06a A flaw...

CVE-2022-24693

CVE-2022-24693 Description Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...

zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri

CVE-2026-10672 — Zephyr LwM2M Firmware Update OOB Read PoC Proof of concept for CVE-2026-10672 , an out-of-bounds read in Zephyr RTOS's LwM2M firmware-update pull client subsys/net/lib/lwm2m/lwm2mpullcontext.c. Vulnerability CVE : CVE-2026-10672 CVSS : 8.2 High...

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...

CVE-2021-25646

Apache Druid RCE title="druid" && title=="Apache Druid" POST /druid/indexer/v1/sampler?for=filter HTTP/1.1 Host: x.x.x.x:8888 Content-Length: 612 Accept: application/json, text/plain, / Origin: http://x.x.x.x:8888 User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...