316346 matches found
CVE-2026-80717
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
EUVD-2026-67443
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...
CVE-2026-80708
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...
CVE-2026-80708
This Linux kernel vulnerability affects the s390/zcrypt subsystem, specifically the cca_clr2cipherkey() function used during clear key to secure key token import. The root cause is that the internal helper _ip_cprb_helper() used internal buffer memory for building and processing CPRBs but never s...
CVE-2026-80708 s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...
CVE-2026-80708 s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...
CVE-2026-80607
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...
CVE-2026-80607 tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...
CVE-2026-80607 tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...
EUVD-2026-67483
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...
CVE-2026-80607
CVE-2026-80607 affects the Linux kernel in the tracing/probes subsystem. The issue is a WARN_ON_ONCE() in parse_btf_arg that can be easily triggered by a user adding a kprobe event based on a raw address with a BTF parameter . Since this is not truly an unexpected condition, the fix removes the w...
CVE-2026-5097 wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter
The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
CVE-2026-5097 wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter
The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
CVE-2026-5097
The wpForo Forum plugin for WordPress is affected by an unauthenticated SQL Injection via the 'referer' parameter in all versions up to and including 2.4.17 . The root cause is insufficient escaping on the user-supplied parameter combined with a lack of sufficient preparation on the existing SQL ...
EUVD-2026-67466
The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
CVE-2025-53547-POC
CVE-2025-53547 POC Dies ist ein PoC für CVE-2025-53547 Chart.lock verknüpft die Testdatei mit /tmp/1.txt /tmp/1.txt injiziert einen Befehl, der /tmp/2.txt erstellt. In einer realen Produktumgebung können Sie die Chart.lock-Link-Datei ändern, um jeden gewünschten Befehl zu injizieren, wie zum...
CVE-2024-53677-POC
CVE-2024-53677 Una vecchia vulnerabilità che colpisce Apache Struts portando a LFI ed esecuzione remota. maggiori informazioni sulla vulnerabilità, puoi consultare questo fantastico blog. Apache Struts path traversal → RCE CVE-2024-53677 Utilizzo POC Ho dedicato molto tempo per rendere questo...
Xjar_tips
Xjartips Einführung: root@kitploit: Spring Boot JAR-Tool zum sicheren Verschlüsseln und Ausführen; unterstützt auch native JAR-Dateien. Basiert auf der Verschlüsselung von Ressourcen im JAR-Paket und einem erweiterten ClassLoader – ein Konzept für verschlüsseltes Starten und dynamisches...
webuploader-0.1.15-Demo
Il componente webuploader-v-0.1.15 presenta una vulnerabilità di upload di file non autorizzato Introduzione: il componente Baidu WebUploader presenta una vulnerabilità di upload di file. La vulnerabilità è dovuta al fatto che la pagina di upload del componente WebUploader non filtra rigorosament...
St2-052
Test del PoC per S2-052 nome originale: distribuzione del war su Tomcat Indirizzo originale: http://blog.csdn.net/caiqiiqi/article/details/77861477 Scarica l'ultima versione interessata, struts-2.5.12, dal sito ufficiale di Struts2, all'indirizzo:...