78027 matches found
EUVD-2026-109918
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...
ROOT-APP-MAVEN-CVE-2024-38819 CVE-2024-38819 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2024-38819 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-38816 CVE-2024-38816 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2024-38816 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41845 CVE-2026-41845 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-41845 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
Auto-Root-Exploit
Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...
airgorah
Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...
CVE-2026-112346
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...
CVE-2026-112346
The OpenHands Software Agent SDK (versions before 1.52.0 ) is vulnerable to an unauthenticated Remote Code Execution (RCE) . The issue stems from the DockerWorkspace and Apptainer workspace launchers binding the sandbox agent server to all network interfaces (0.0.0.0 ) while using an empty sessio...
ROOT-APP-PYPI-CVE-2026-59198 CVE-2026-59198 in pillow - Patched by Root
Root has patched CVE-2026-59198 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-59199 CVE-2026-59199 in pillow - Patched by Root
Root has patched CVE-2026-59199 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-40192 CVE-2026-40192 in pillow - Patched by Root
Root has patched CVE-2026-40192 in the pillow package for Root:PyPI. Multiple fixed versions available...
CVE-2026-77055
boneIO blackdebianimages gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This issue was fixed in version 1.6.0: the ima...
CVE-2026-65184
The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...
CVE-2026-115930
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
lama
lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...
EUVD-2026-109904
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
ROOT-APP-PYPI-CVE-2023-50447 CVE-2023-50447 in pillow - Patched by Root
Root has patched CVE-2023-50447 in the pillow package for Root:PyPI. Multiple fixed versions available...