Lucene search
+L

7042 matches found

Packet Storm News
Packet Storm News
•added 2026/04/13 12:00 a.m.•22 views

YARA-X 1.15.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/13 12:00 a.m.•16 views

axios SSRF

The vulnerability of the axios library is related to insufficient validation of requests on the server side when processing NOPROXY rules. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

9.9CVSS6.7AI score0.01161EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/04/12 3:30 p.m.•38 views

EUVD-2019-20135

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

8.6CVSS6.4AI score0.00208EPSS
SaveExploits1References5
NVD
NVD
•added 2026/04/12 1:16 p.m.•28 views

CVE-2019-25705

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

8.6CVSS0.00208EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/04/12 12:28 p.m.•10 views

CVE-2019-25705

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

8.6CVSS6.4AI score0.00208EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/12 12:28 p.m.•10 views

CVE-2019-25705 Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

8.6CVSS6.7AI score0.00208EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/04/12 12:28 p.m.•51 views

CVE-2019-25705 Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

8.6CVSS0.00208EPSS
SaveExploits1References4
CVE
CVE
•added 2026/04/12 12:28 p.m.•46 views

CVE-2019-25705

Echo Mirage 3.1 is affected by a stack buffer overflow in the Rules action field. A local attacker can cause a crash or arbitrary code execution by supplying an oversized string via the Rules dialog (crafting a payload in a text file and pasting into the action field). This overflow can overwrite...

8.6CVSS6.7AI score0.00208EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/12 12:00 a.m.•35 views

PT-2026-32167

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

8.6CVSS6.4AI score0.00208EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/12 12:00 a.m.•5 views

CVE-2019-25705: Out-of-bounds Write

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

8.6CVSS6.7AI score0.00208EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/04/12 12:00 a.m.•35 views

Echo Mirage 缓冲区错误漏洞

Echo Mirage is a software tool developed by abhi1299, used for audio signal processing and echo effect simulation. Version 3.1 of Echo Mirage contains a buffer error vulnerability, which stems from insufficient input validation of the Rules operation field. This vulnerability may lead to a stack...

8.6CVSS6.3AI score0.00208EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2026/04/11 9:29 a.m.•19 views

SUSE CVE-2025-62718

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NOPROXY rules. Requests to loopback addresses like localhost. with a trailing dot or ::1 IPv6 literal skip NOPROXY matching and go...

9.9CVSS6.3AI score0.01161EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/04/10 8:19 p.m.•15 views

CVE-2026-40191

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.4-beta-1f46165, ClearanceKit's Endpoint Security event handler only checked the source path of dual-path file operations against File Access Authorization FAA rules and App Jail...

6.8CVSS5.9AI score0.00148EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2026/04/10 7:16 a.m.•20 views

CVE-2026-6027

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack can be launched...

10CVSS0.03253EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/10 6:00 a.m.•61 views

CVE-2026-6027 Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack can be launched...

10CVSS0.03253EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
•added 2026/04/10 12:00 a.m.•17 views

Falco 0.43.1

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

5.8AI score
SaveExploits0
EUVD
EUVD
•added 2026/04/09 9:31 p.m.•19 views

EUVD-2026-21185

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command injection. The attack can be initiated remotely. Th...

10CVSS6.9AI score0.03253EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/09 8:30 p.m.•12 views

CVE-2026-5978 Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command injection. The attack can be initiated remotely. Th...

10CVSS7.8AI score0.03253EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/09 5:32 p.m.•29 views

EUVD-2025-209381

Axios has a NOPROXY Hostname Normalization Bypass Leads to SSRF...

9.3CVSS6.3AI score0.01161EPSS
SaveExploits1References7
GithubExploit
GithubExploit
•added 2026/04/09 4:42 p.m.•150 views

Exploit for CVE-2025-15260

CVE-2025-15260: Missing Authorization / Broken Access Control...

6.5CVSS5.9AI score0.00309EPSS
SaveExploits2
Rows per page
Query Builder