Lucene search
+L

8681 matches found

SUSE CVE
SUSE CVE
added 2025/12/31 12:28 a.m.10 views

SUSE CVE-2023-54201

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

5.8CVSS6.5AI score0.00151EPSS
SaveExploits0References21
EUVD
EUVD
added 2025/12/30 3:30 p.m.21 views

EUVD-2023-60440

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

6AI score0.00151EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/30 1:16 p.m.21 views

CVE-2023-54201

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

7.8CVSS0.00151EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/30 1:16 p.m.12 views

UBUNTU-CVE-2023-54201

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

7.8CVSS6.2AI score0.00151EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2025/12/30 4:13 a.m.200 views

react2shell-poc-demo

!CAUTION THIS PROJECT IS USED FOR DEMONSTRATION PURPOSES O...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/12/29 12:00 a.m.20 views

Application-Specific Power Side-Channel Attacks and Countermeasures: A Survey

Side-channel attacks try to extract secret information from a system by analyzing different side-channel signatures, such as power consumption, electromagnetic emanation, thermal dissipation, acoustics, time, etc. Power-based side-channel attack is one of the most prominent side-channel attacks i...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/28 1:44 a.m.10 views

Malicious code in aiogram-types-v3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f6ba04e944f1dfda1aaa2d571fa79cd8ce4074a106bae228e582473226810baf During installation or importing the module, the package starts a reverse shell to hardcoded locatiom --- Category: MALICIOUS - The campaign has clearly...

7.7AI score
SaveExploits0References1
OSV
OSV
added 2025/12/28 1:44 a.m.22 views

MAL-2025-192953 Malicious code in aiogram-types-v3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f6ba04e944f1dfda1aaa2d571fa79cd8ce4074a106bae228e582473226810baf During installation or importing the module, the package starts a reverse shell to hardcoded locatiom --- Category: MALICIOUS - The campaign has clearly...

7.6AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/26 9:48 p.m.11 views

CVE-2025-61914 n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox

n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting XSS vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing executable scripts, the payload may execute directly in the...

7.3CVSS5.5AI score0.00245EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/26 4:33 a.m.13 views

Malicious code in aiogram-3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d8dac0d1eb98dbfc0fe46cabeadb550699f5e41b5d033ded073f7572f450bf7 During installation or importing the module, the package starts a reverse shell to hardcoded locatiom --- Category: MALICIOUS - The campaign has clearly...

7.7AI score
SaveExploits0References1
OSV
OSV
added 2025/12/26 4:33 a.m.15 views

MAL-2025-192940 Malicious code in aiogram-3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d8dac0d1eb98dbfc0fe46cabeadb550699f5e41b5d033ded073f7572f450bf7 During installation or importing the module, the package starts a reverse shell to hardcoded locatiom --- Category: MALICIOUS - The campaign has clearly...

7.6AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/12/26 12:00 a.m.8 views

ReSMT: An SMT-Based Tool for Reverse Engineering

Software obfuscation techniques make code more difficult to understand, without changing its functionality. Such techniques are often used by authors of malicious software to avoid detection. Reverse Engineering of obfuscated code, i.e., the process of overcoming obfuscation and answering questio...

7.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/25 2:18 p.m.16 views

Malicious code in aiogram-sever-patch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0be41c08090971a10e54930628353748c82ed55c0f9795b26a932f806852fd4f During installation or importing the module, the package starts a reverse shell to hardcoded locatiom --- Category: MALICIOUS - The campaign has clearly...

7.7AI score
SaveExploits0References1
OSV
OSV
added 2025/12/25 2:18 p.m.24 views

MAL-2025-192931 Malicious code in aiogram-sever-patch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0be41c08090971a10e54930628353748c82ed55c0f9795b26a932f806852fd4f During installation or importing the module, the package starts a reverse shell to hardcoded locatiom --- Category: MALICIOUS - The campaign has clearly...

7.6AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/24 11:03 a.m.244 views

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

POC exploit for Dolibarr example: python3 exploit.py http...

8.8CVSS8.8AI score0.82094EPSS
SaveExploits16
RedhatCVE
RedhatCVE
added 2025/12/23 11:29 p.m.27 views

CVE-2023-53981

PhotoShow 3.0 contains a remote code execution vulnerability that allows authenticated administrators to inject malicious commands through the exiftran path configuration. Attackers can exploit the ffmpeg configuration settings by base64 encoding a reverse shell command and executing it through a...

8.6CVSS8.3AI score0.00926EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/23 8:15 p.m.11 views

CVE-2021-47735

CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template files. Attackers can exploit the template editing functionality by crafting a reverse shell payload and saving it through the template editing...

8.6CVSS6.3AI score0.00884EPSS
SaveExploits1References3
CVE
CVE
added 2025/12/23 7:34 p.m.39 views

CVE-2021-47735

CVE-2021-47735 (CMSimple 5.4) describes an authenticated remote code execution via the template editing feature. The vulnerability arises when logged-in users can inject PHP code into template files through the template editing endpoint using a valid CSRF token, enabling execution of a reverse sh...

8.8CVSS7.7AI score0.00884EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/12/23 7:34 p.m.35 views

CVE-2021-47735 CMSimple 5.4 Authenticated Remote Code Execution via Template Editing

CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template files. Attackers can exploit the template editing functionality by crafting a reverse shell payload and saving it through the template editing...

8.8CVSS0.00884EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/23 7:34 p.m.6 views

CVE-2021-47735 CMSimple 5.4 Authenticated Remote Code Execution via Template Editing

CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template files. Attackers can exploit the template editing functionality by crafting a reverse shell payload and saving it through the template editing...

8.8CVSS7.7AI score0.00884EPSS
SaveExploits1References3
Rows per page
Query Builder