4482371 matches found
CVE-2026-71219
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
CVE-2026-71219
gfs2-utils contains a stack overflow in the hash table traversal code of metawalk.c . The function alloca() is called with an exponentially derived size (1 <
CVE-2026-71219
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
CVE-2026-47857
A flaw was found in Reactor Core. A remote attacker could exploit this vulnerability by using the Flux.windowTimeout operator with fairBackpressure enabled, leading to a Denial of Service DoS condition. This could cause applications to become unresponsive or crash. Mitigation Mitigation for this...
CVE-2026-47863
A flaw was found in Reactor Core. Applications using the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. This occurs when upstream components deliver items during an active flush, causing the processing pipeline to permanently hang an...
CVE-2018-19276
CVE-2018-19276 OpenMRS असुरक्षित ऑब्जेक्ट डिसीरियलाइज़ेशन RCE From https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607 असुरक्षित ऑब्जेक्ट डिसीरियलाइज़ेशन बिना लॉग इन किए मनमाना कोड निष्पादन Arbitrary Code Execution की अनुमति देता है। वेबसर्विसेज़ मॉड्यूल पर IP...
log4j-4255
log4j2 4255 — Contournement de la liste blanche de FilteredObjectInputStream via java.rmi.MarshalledObject Un laboratoire autonome et conteneurisé qui reproduit de bout en bout le problème Apache log4j24255 contre les artefacts officiels Log4j 2.26.1 sur JDK 17 , avec des contrôles positifs, un...
browser-security-project
لا يحتوي هذا المستودع على ملف README...
CVE-2026-38945
CVE-2026-38945 लेखक: Rafael José Núñez Gulías कंपनी: Iberian Var Group प्रभावित उत्पाद: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet सलाह: RSEC200967 rvia Raynet में एक find कमांड को अनुचित रूप से समाप्त खोज मानदंडों के साथ निष्पादित करता है ताकि oracle विकल्प आह्वान किए जाने...
CVE-2021-44228
🛡️ CVE-2021-44228: تحليل Log4Shell - الثغرة التي أحدثت ثورة في أمن جافا تأثير حرج CVSS 10.0 | اكتُشفت في عام 2021، هذا الخلل في Apache Log4j يسمح بتنفيذ التعليمات البرمجية عن بُعد RCE ويؤثر على ملايين الأنظمة عالمياً. لا يزال حتى اليوم تذكيراً رئيسياً للأمن السيبراني! 🔍 ما هو Log4Shell؟...
OWASP-Top-10-AI-Infrastructure-Security-Risks
Les 10 Principaux Risques de Sécurité pour les Centres de Données et l'Infrastructure IA FORGE - Renforcez le métal sous le modèle. 🌐 Site web : https://forge-framework.io Résumé Exécutif Les centres de données IA sont construits plus rapidement qu'ils ne sont sécurisés. L'expansion rapide des...
CVE-2026-62872
A flaw was found in .NET Framework. An authorized attacker could exploit incorrect authorization over a network to elevate their privileges. Mitigation No mitigation is required. Red Hat does not ship the Windows-only .NET Framework runtime...
CVE-2019-8331
Eng Description CVE-2019-8331 is a Cross-Site Scripting XSS security vulnerability found in Bootstrap, a JavaScript library widely used for developing websites and mobile applications. This vulnerability occurs because Bootstrap does not properly sanitize data sent via thedata-template attribute ...
CVE-2026-58641
A flaw was found in .NET. This vulnerability, caused by an integer overflow or wraparound, allows an unauthorized attacker to locally elevate their privileges. This could lead to an attacker gaining higher access rights than intended on the affected system. Mitigation No mitigation is required. R...
Sandbox-Challenge-Log4Shell-CVE-2021-44228-
सैंडबॉक्स चैलेंज: Log4Shell CVE-2021-44228 अवलोकन यह वॉकथ्रू CISA थ्रेट सैंडबॉक्स चैलेंज के लिए CVE-2021-44228, जिसे आमतौर पर Log4Shell के नाम से जाना जाता है, को पूरा करने के लिए उठाए गए कदमों का दस्तावेजीकरण करता है। चैलेंज में दो उद्देश्यों को पूरा करना शामिल था — एक रेड टीम आक्रामक और एक ब्लू...
faraday-cli
Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...
apache_normalize_path
CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apache HTTP Server Exploited On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the mo...
CLSA-2026-1788437939 TuxCare security update for django (5 CVEs)
TuxCare rebuilt django to address 5 CVEs. Fixed in 5.0.post10+tuxcare...