CVE-2026-104053

The itsourcecode Pet Shop Management System 1.0 is vulnerable to SQL injection via an unknown function in the admin_reservefilter.php file. The flaw occurs because the filter argument is improperly handled, allowing for remote exploitation. While the documents do not provide specific remediation ...

CVE-2026-73637

A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...

EUVD-2026-91158

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file adminrejectcompleted.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2021-24086

CVE-2021-24086 Это доказательство концепции для CVE-2021-24086 «Уязвимость типа «Отказ в обслуживании» в Windows TCP/IP», разыменование NULL в tcpip.sys, исправленная Microsoft в феврале 2021 года. Согласно этому твиту, уязвимость была найдена @piazzt. Она может быть удалённо вызвана отправкой...

The vulnerability of the PyJWT OKPAlgorithm.from_jwk() function in the jwt/algorithms.py scenario from the PyJWT library allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PyJWT OKPAlgorithm.fromjwk function in the jwt/algorithms.py library is related to the use of an unreliable source. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261002-73-0034

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

VulnCheck KEV: CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

PT-2026-104122

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

CVE-2026-82042: Missing Authentication for Critical Function

UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access by presenting a valid Utm-Internal-Key header matching the INTERNALKEY environment variable value, which the InternalApiKeyFilter accepts for any endpoint...

CVE-2026-103627: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-46037)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505962; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2025-70886

CVE-2025-70886 Эксплойт Proof of Concept PoC для CVE-2025-70886, уязвимости постоянного отказа в обслуживании в Halo CMS v2.22.4 и более ранние версии, которая позволяет удаленным злоумышленникам вызывать сбой интерфейса комментариев администратора путем отправки некорректных полезных нагрузок...

OpenSSH-CVE-2024-6387-Fix

CVE-2024-6387 Скрипт смягчения уязвимости OpenSSH Обзор Этот Bash-скрипт предназначен для смягчения уязвимости CVE-2024-6387 в OpenSSH. Уязвимость затрагивает определённые версии OpenSSH и потенциально может позволить удалённым неаутентифицированным злоумышленникам выполнить произвольный код на...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2014-0224

В этом репозитории нет README...

CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python

Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version...

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2025-62168

CVE-2025-62168 Squid Proxy 오류 처리에서의 정보 노출 스캐너 탐지 및 PoC "HTTP 인증 자격 증명을 삭제하지 못해 Squid는 정보 노출 공격에 취약합니다. 심각도: 이 문제는 스크립트가 브라우저 보안 보호를 우회하고 신뢰할 수 있는 클라이언트가 인증에 사용하는 자격 증명을 알아낼 수 있게 합니다. 이 문제는 원격 클라이언트가 Squid를 백엔드 로드 밸런싱에 사용하는 웹 애플리케이션 내부에서 사용되는 보안 토큰이나 자격 증명을 식별할 수 있게 할 가능성이 있습니다. 이러한 공격은 Squid가 HTT...

CVE-2026-102825

A flaw was found in russh. The server fails to enforce the configured limit on maximum authentication attempts during user authentication. An unauthenticated remote attacker can exploit this flaw by continuously submitting authentication requests over a single connection. This allows an attacker ...

russh: russh: Authentication attempt limit bypass via unenforced maximum authentication attempts

A flaw was found in russh. The server fails to enforce the configured limit on maximum authentication attempts during user authentication. An unauthenticated remote attacker can exploit this flaw by continuously submitting authentication requests over a single connection. This allows an attacker ...