EUVD-2026-67864

plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed URL to a very large response, causing src/plone/app/portlets/portlets/rss.py to download and retain excessive data in...

CVE-2026-55248

plone.app.portlets (Plone CMS) is vulnerable to three issues in its RSS feed portlet, all fixed in versions 5.0.8, 6.0.4, and 7.0.2 . A low-privileged member can set the RSS feed URL to a very large response, causing excessive in-memory data retention and denial of service via the FEED_DATA cache...

CVE-2026-55248 plone.app.portlets: Denial of service via RSS feed portlet

plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed URL to a very large response, causing src/plone/app/portlets/portlets/rss.py to download and retain excessive data in...

gogs

👉 Distribuisci su DigitalOcean e ottieni $200 in crediti gratuiti! 🔮 Visione Il progetto Gogs /gɑgz/ mira a costruire un servizio Git self-hosted semplice, stabile ed estensibile che possa essere configurato nel modo più indolore possibile. Con Go, questo può essere realizzato con una distribuzio...

EUVD-2026-66110

ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption...

CVE-2026-18649

CVE-2026-18649 - GStreamer rtph264depay: DoS per crescita illimitata della memoria Proof of concept per una vulnerabilità di esaurimento delle risorse nel depayloader RTP H.264 di GStreamer rtph264depay. Lo stesso schema interessa anche rtph265depay. Cos'è Durante il riassemblaggio RTP frammentat...

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – Token dell'account di servizio Kubernetes montato in HostPath Codice del programma YAML + exploit Python root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec:...

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – HTTP/2 Rapid Reset DDoS Codice del programma client + server Python/http2 root@kitploit: http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET,...

GHSA-962X-CCWF-8X6P Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...

Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...

GHSA-X8MJ-6P3Q-G5PP free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

VertXploit

VertXploit Exploit dei sistemi di controllo accessi HID VertX e EDGE Riepilogo VertXploit è uno strumento che può essere utilizzato per sfruttare i sistemi di controllo accessi HID VertX e EDGE. Esiste una vulnerabilità nel servizio discoveryd, che non riesce a sanificare i dati dell'utente prima...

CVE-2021-31166

CVE-2021-31166 Perché Recentemente ho scritto un exploit per CVE-2021-31166, sfrutta CVE-2021-31166 e CVE-2021-31166. Un pentester dovrebbe usare https://github.com/mauricelambert/CVE-2021-31166, ma nei team SOC abbiamo bisogno di conoscere la vulnerabilità specifica per correggerla adeguatamente...

GHSA-GPWF-4H98-V82Q datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...

datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...

CVE-2024-49113

LDAP Nightmare Un exploit per CVE-2024-49113 segnalato da Yuki Chen @guhe120. Una vulnerabilità nel Lightweight Directory Access Protocol LDAP di Windows. Creato da SafeBreach Labs pubblicato il 1° gennaio 2025. Per l'analisi tecnica completa della vulnerabilità e come siamo riusciti a sfruttarla...

CVE-2026-54788 dd-trace-rs: Unbounded W3C tracestate parsing may lead to DoS

dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...

CVE-2026-54788 dd-trace-rs: Unbounded W3C tracestate parsing may lead to DoS

dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...

EUVD-2026-67829

dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...