1069614 matches found
DEBIAN-CVE-2026-100657
Netty's STOMP codec io.netty:netty-codec-stomp contains a ByteBuf leak in StompSubframeDecoder. Once a frame's declared content-length has been fully read, the decoder allocates a chunk buffer from the channel allocator and parks it in an instance field while waiting for the single NUL byte that...
CVE-2026-100657
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2026-100639
SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/gutter/index.ts from content pasted as plain-text Markdown containing a Kramdown inline attribute list IAL. Because the...
CVE-2026-100640
SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderers to access native clipboard formats by invoking clipboardReadMathML, clipboardReadOffice, and clipboardReadWPS commands with matching plaintext. Attackers controlling remote...
CVE-2026-100631
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...
CVE-2026-100613
capgo.app is an over-the-air OTA update platform for Capacitor apps. In all versions up to and including the current release no patch available at time of publication, the transferapp database function transfers an app, its channels, versions and related records to a destination organization...
CVE-2026-100600
ClawHub the openclaw/clawhub application/backend does not bind anonymous HTTP API requests to a trusted caller identity, so all direct anonymous API requests share a single default quota allowance. A remote, unauthenticated caller can drain that shared allowance and thereby deny or degrade API...
CVE-2022-24086
CVE-2022-24086 CVE-2022-24086 POC example provided by BurpRoot CVE-2022-24086: Overview Affected Software: Magento2 CVE ID: CVE-2022-24086 CVSS Score: 9.8 Critical Description CVE-2022-24086 is a critical security vulnerability affecting multiple versions of the Magento2 e-commerce platform. This...
eval-stdin
Util PHP eval-stdin.php CVE-2017-9841 vulnerabilidad es una vulnerabilidad RCE en eval-stdin.php desactualizado. Este exploit es solo una automatización para la vulnerabilidad mencionada y aún está en desarrollo. Escrito en Ruby 3.0.4 en 2 horas, probado en Kali linux, Arch Linux, Ubuntu minimal ...
redis-stack-CVE-2024-55656
CVE-2024-55656 - Redis Stack - Vulnerabilidad de desbordamiento de enteros en RedisBloom que permite ejecución remota de código Título: Vulnerabilidad de desbordamiento de enteros en RedisBloom de Redis Stack que permite ejecución remota de código ZDI: ZDI-25-009 CVE: CVE-2024-55656 Créditos:...
CVE-2016-6366
CVE-2016-6366 Public repository for improvements to the EXTRABACON exploit, a remote code execution for Cisco ASA written by the Equation Group NSA and leaked by the Shadow Brokers. There is improved shellcode, a LINA offset finder script, a Metasploit module, and extrabacon-2.0. We are adding...
CVE-2020-10131
CVE-2020-10131 - CVE-2020-10131 - El producto SearchBlox anterior a V-9.2.1 es vulnerable a la inyección de macros CSV. Descripción del producto: SearchBlox simplifica la búsqueda empresarial para organizaciones complejas. Las herramientas intuitivas e inteligentes de SearchBlox ofrecen una...
CVE-2021-32157
..| XSS a RCE CRON|.. Descripción : Explotando un ataque de Cross-Site Scripting Reflejado XSS para obtener una Ejecución Remota de Comandos RCE a través de la función de Trabajos Cron Programados de Webmin Versión probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de ataque: Remoto...
CVE-2026-94132
The AcyMailing Enterprise extension for Joomla (versions 1.0.0 – 11.0.5 ) contains a Remote Code Execution (RCE) vulnerability. The root cause is that the mailbox actions in POP3 mode save incoming MIME attachments to the media/com_acym/upload/ directory without performing extension checks. This ...
CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...
CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...
EUVD-2026-87772
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...
CVE-2026-100647
A flaw was found in vLLM. An unauthenticated remote attacker can cause a Denial of Service DoS by sending HTTP requests containing an excessively large cachesalt parameter to exposed API endpoints. Because this input lacks maximum length validation, processing the oversized data consumes excessiv...
l4j-tp1
log4shell verdadero positivo Este es un proyecto web simple con una vulnerabilidad log4shell. El proyecto define un servicio get scabench.HelloWorldService que devuelve una cadena de texto plano hello world. El servicio no espera parámetros, y si se encuentran parámetros, se registra un error. La...