271719 matches found
ROOT-OS-DEBIAN-13-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root
Root has patched CVE-2026-55973 in the unbound package for Root:Debian:13. Multiple fixed versions available...
389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet()
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...
389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet()
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...
Important: Red Hat Security Advisory: valkey security, bug fix, and enhancement update
An update for valkey is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free
A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...
valkey: Valkey: Remote code execution via use-after-free in stream deserialization
A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...
redis: Redis: Remote Code Execution via specially crafted RESTORE payload
A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...
VTIGER-CRM-RCE-CVE-2026-23698
Este repositorio no tiene un README...
CVE-2026-27475
CVE-2026-27475（CVSS-B 9.2 严重） SPIP 4.4.8 中经过身份验证的不安全反序列化漏洞 更多解释请访问我的网站 RCE Gadget Attacker plugins/rcegadget/rcegadgetoptions.php root@kitploit: DEBUG:\n"; echo "File: "; vardump$this-file; echo "Data: "; vardump$this-data; echo ""; fileputcontents$this-file, $this-data; die"PROOF"; 2. 以管理员身份登录 3...
CVE-2026-63030
🚨 CVE-2026-63030 — WP2Shell WordPress REST API Route Confusion → Remote Code Execution A Critical WordPress Core vulnerability enabling REST API route confusion that can be chained with SQL Injection to achieve unauthenticated Remote Code Execution. 📖 Overview CVE-2026-63030 is a Critical...
CVE-2025-52970
CVE-2025-52970 Exploit de omisión de autenticación de FortiWeb a ejecución remota de código Características Armado añadiendo un shell interactivo para permitir la ejecución remota de código Uso root@kitploit: python CVE-2025-52970.py -t target.com Demostración Referencias...
FUXAPWN
CVE-2026-25895 — FUXA = 1.2.9 Path Traversal no autenticado a Ejecución Remota de Código Escritura arbitraria de archivos no autenticada pre-auth contra FUXA, una plataforma SCADA/HMI basada en Node.js. Encadena a ejecución remota de código mediante varias primitivas posteriores a la escritura...
WSUS-CVE-2025-59287-RCE
WSUS-CVE-2025-59287-RCE CVE-2025-59287 es una vulnerabilidad de ejecución remota de código crítica CVSS 9.8 que afecta a TODOS los Microsoft Windows Server Update Services, también conocidos como WSUS, y ha sido explotada en ataques reales. La vulnerabilidad explota una deserialización insegura e...
389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet()
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...
valkey: Valkey: Remote code execution via use-after-free in stream deserialization
A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...
redis: Redis: Remote Code Execution via specially crafted RESTORE payload
A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...
valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free
A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...
Important: Red Hat Security Advisory: valkey security, bug fix, and enhancement update
An update for valkey is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
SQL-Injection-and-RCE_CVE-2025-57819
FreePBX RCE PoC No autenticado Resumen Las versiones 15, 16 y 17 de FreePBX contienen una vulnerabilidad de Ejecución Remota de Código RCE causada por una sanitización insuficiente de los datos proporcionados por el usuario en los endpoints. Un atacante no autenticado puede manipular la base de...
CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle
10. CVE-2026-9998 – Deserialización insegura en oráculo de blockchain Resumen Un nodo oráculo de blockchain deserializa datos de un evento de contrato inteligente utilizando pickle de Python, lo que permite a un atacante ejecutar comandos arbitrarios. Severidad: Crítica Compromiso total del nodo...