CVE-2026-41940

⚠️ CVE-2026-41940 - cPanel & WHM प्रमाणीकरण बाइपास cPanel & WHM में गंभीर प्री-ऑथेंटिकेशन बाइपास 📌 अवलोकन CVE-2026-41940 एक गंभीर प्रमाणीकरण बाइपास भेद्यता है जो cPanel & WHM और WP Squared को प्रभावित करती है। एक अप्रमाणित दूरस्थ हमलावर लॉगिन को पूरी तरह से बाइपास कर सकता है और सर्वर तक पूर्ण...

CVE-2025-0282

PoC para CVE-2025-0282 Um estouro de buffer baseado em pilha remoto não autenticado afetando Ivanti Connect Secure, Ivanti Policy Secure e Ivanti Neurons para gateways ZTA Visão Geral Este é um exploit de prova de conceito para demonstrar a exploração de CVE-2025-0282, e é baseado na estratégia d...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Versione modificata dell'exploit originale: https://www.exploit-db.com/exploits/45233 Convertito in Python3 Aggiunta opzione per wordlist di username Come Eseguire root@kitploit: Install the requirements: foo@bar:$ pip3 install -r...

CVE-2019-19550

CVE-2019-19550 Beschreibung Die Umgehung der Remote-Authentifizierung in Senior Rubiweb 6.2.34.28 und 6.2.34.37 ermöglicht Admin-Zugriff auf vertrauliche Informationen betroffener Benutzer, die anfällige Versionen verwenden. Der Angreifer muss lediglich die korrekte URL angeben. Wichtige Daten...

CVE-2020-4463

IBM Maximo Asset Management ist anfällig für Informationsoffenlegung durch XXE-Sicherheitslücke CVE-2020-4463 IBM Maximo Asset Management ist anfällig für einen XML-External-Entity-Injection-Angriff XXE bei der Verarbeitung von XML-Daten. Ein entfernter Angreifer könnte diese Sicherheitslücke...

CVE-2016-6210-Exploit

Esta é a primeira versão do exploit "armamentado" para CVE-2016-6210 Contexto: Postado por Eddie Harari no Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 O resumo: Ao enviar senhas grandes, um usuário remoto pode enumerar usuários em um sistema que executa SSHD. Esse problema exis...

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

cve-2020-9375

CVE-2020-9375 I dispositivi TP-Link Archer C50 V3 precedenti alla Build 200318 Rel. 62209 consentono a un attaccante remoto di causare un denial of service tramite un'intestazione HTTP manipolata contenente un campo Referer inaspettato. Titolo Exploit : TP-Link Archer C50 v3 Denial of Service Dat...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – CrushFTP Authentifizierungsumgehung 🔎 Überblick CVE-2025-2825 ist eine kritische Schwachstelle zur Authentifizierungsumgehung, die CrushFTP betrifft, einen weit verbreiteten sicheren Dateiübertragungsserver. Der Fehler ermöglicht es entfernten Angreifern, die...

CVE-2026-65832

A flaw was found in Deskflow, a keyboard and mouse sharing application. A remote, unauthenticated Deskflow server can send specially crafted messages to a connected client, leading to an out-of-bounds read. This vulnerability could result in the disclosure of four bytes of memory at an...

CVE-2026-19446

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

CVE-2026-75514

In BunkerWeb versions prior to 1.6.13, the blacklist, greylist, and antibot modules in blacklist.lua, greylist.lua, and antibot.lua trust PTR suffix matches in IGNORE_RDNS, GREYLIST_RDNS, and ANTIBOT_IGNORE_RDNS without calling get_ips to verify the hostname resolves to the client IP. An attacker...

EUVD-2026-63168

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

DEBIAN-CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...

CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...

CVE-2026-73523

COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The numcanms...

CVE-2026-73523

In COVESA Open1722 through 0.9.2, the num_can_msgs variable (declared uint8_t) in acf-can-listener.c truncates the -1 error return from avtp_to_can() to 255, causing a write loop to iterate 255 times over a 15-slot stack array and leak ~18 KB of adjacent stack memory as ~240 CAN frames to any bus...

CVE-2026-73522 COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtptocan function increments its write...