CVE-2021-2471

CVE-2021-2471 - MySQL Connector/J 中的 XXE 漏洞 Oracle MySQL 的 MySQL 连接器产品（组件：Connector/J）存在漏洞。受影响的受支持版本是 8.0.26 及更早版本。 成功利用此漏洞可导致对关键数据的未授权访问，或完全访问所有 MySQL 连接器可访问的数据，并能够未经授权地导致 MySQL 连接器挂起或频繁可重复的崩溃（完全拒绝服务）。 免责声明： 此漏洞由阿里云安全团队的徐远珍和阿里巴巴的陈宏坤发现。 本 PoC 仅供研究目的使用。请勿将其用于攻击未获得明确授权的目标。 供应商披露：...

BrotherVulnerabilities

多款兄弟设备：多个漏洞 概述 Rapid7 对 兄弟工业株式会社 的多功能打印机（MFP）进行了一项零日研究项目。该研究发现了八个新漏洞。这些漏洞中的部分或全部被确认影响兄弟牌打印机、扫描仪和标签制作设备系列中的 689 个型号。此外，来自富士胶片商业创新公司的 46 个打印机型号、理光公司的 5 个打印机型号、东芝泰格公司的 2 个打印机型号以及柯尼卡美能达公司的 6 个型号也受到这些漏洞中的部分或全部影响。总计，来自 5 家供应商的 748 个型号受到影响。 以下为八个漏洞的总结： CVE| 描述| 受影响服务| CVSS ---|---|---|--- CVE-2024-51977...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

CVE-2018-8065

Flexense HTTP Server Server-Enable web server on port. Module triggers a user space write access violation on syncbrs.exe memory region. Number of requests that will crash the server changes between 200-1000 depending on the OS version and system memory. Sync Breeze Enterprise 10.6.24 version...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 漏洞标题：Vehicle Service Management System - 'Multiple' 文件上传导致HTML注入 漏洞作者：SANU P.L CVE：CVE-2021-46079 CVSS：7.2 高 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection https://nvd.nist.gov/vuln/detail/CVE-2021-46079...

CVE-2026-65400

CVE-2026-65400 Por primera vez en mucho tiempo, tenemos un RCE en MacOS. Descubierto originalmente por @osxreverser, y posteriormente ampliado por bynar.io. Ver https://blog.calif.io/p/no-country-for-old-passwords para más información. Esto se deriva principalmente del trabajo de @panchocosil...

CVE-2026-82810

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

CVE-2026-14366

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2017-3881

CVE-2017-3881 Cisco IOS 远程代码执行 =================== 本仓库包含针对思科系统于 2017 年 3 月 17 日披露的远程代码执行漏洞的 PoC 代码 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp 描述 漏洞利用文章见 - https://artkond.com/2017/04/10/cisco-catalyst-remote-code-execution/ RCE 利用代码适用于 Cisco...

CVE-2026-62309

A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service DoS. The vulnerability arises from improper...

CVE-2022-38604

CVE-2022-38604 的利用代码 FilesystemEoPs 是 此 仓库的副本，并添加了 x64 编译项目。 此处 您可以找到我的 任意文件删除漏洞 报告。 此处 您可以了解如何利用 任意文件删除 原语 来 实现 本地权限提升 。 此处 您可以了解如何利用 任意文件删除 原语 来 实现 Windows 拒绝服务 。 此处 您可以请我喝一杯独角兽 🦄 分享知识！...

CVE-2026-27852

A flaw was found in dovecot. A remote attacker can craft a malicious email with an excessive number of email addresses or MIME parameters in its headers. When a user attempts to read this message over IMAP, the parsing process consumes an inordinate amount of memory, leading to the termination of...

CVE-2026-80692

A flaw was found in the Bluetooth hcisync component of the Linux kernel. This vulnerability, a Use-After-Free UAF, could allow a local attacker to potentially cause a system crash or execute unauthorized code. This occurs if a connection object is released from memory while the hcisync task is...

CVE-2026-80651

A flaw was found in the Linux kernel's crypto: ccp/sev-dev-tsm module. The dsmcreate function fails to properly validate the pdev-bus pointer, leading to a null pointer dereference. A local attacker could exploit this vulnerability to trigger a kernel crash, resulting in a Denial of Service DoS...

CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS 拒绝服务漏洞 漏洞概述 MikroTik RouterOS 中存在一个漏洞，允许未经身份验证的远程攻击者强制路由器重启。攻击方式是通过 IP 协议号 97 向 RouterOS 的 IPv6 地址发送一个 1 字节的数据包。所有支持 EoIPv6 的 RouterOS 版本均可能受此攻击影响。该攻击要求目标系统已启用 IPv6 并且至少存在一个隧道接口。 攻击向量 目标系统已启用 IPv6。 没有阻止 IP 协议号 97 的 INPUT 数据的 IPv6 过滤规则。 目标系统中至少存在一个隧道接口（隧道类型无关）。 漏洞详...

CVE-2026-82810

extension.vn 2FA Authenticator Extension 1.0.0.2 for Chrome contains an information disclosure vulnerability in the Background Service Worker component. The unrestricted chrome.runtime.onMessageExternal.addListener handler allows an attacker with local access and low privileges to manipulate the ...

CVE-2026-82810 extension.vn 2FA Authenticator Extension Background Service Worker chrome.runtime.onMessageExternal.addListener information disclosure

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...