EUVD-2026-83016

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation...

CVE-2026-10744 IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation...

CVE-2026-65969

OpenImageIO (a toolset for reading, writing, and manipulating image files used in VFX/animation) is affected by a signed 32-bit integer overflow in GifSplitPalette() (src/gif.imageio/gif.h). A truncated TGA input can leave a pending GIF frame that is processed during output close; the multiplicat...

CVE-2026-65970 OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::readnativescanlines return through an error path while...

EUVD-2026-83126

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::readnativescanlines return through an error path while...

CVE-2025-36045

IBM TS4300 Tape Library (versions 1.1.0.1 through 1.7.1.1) is affected by a denial-of-service vulnerability in its email service. Email-related functions in the web GUI and APIs did not enforce rate limiting, allowing an authenticated user to repeatedly invoke email-sending requests and generate ...

EUVD-2025-210956

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

CVE-2026-59181

OpenImageIO , a toolset for reading and manipulating image files in VFX/animation, is affected by a stack buffer overflow in its Cineon reader. A crafted Cineon file can supply a numberOfElements value exceeding the format maximum of eight; CineonInput::open() uses this unchecked value as a loop ...

EUVD-2026-83122

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numberofelements value greater than the format maximum of eight. cineoninput::open...

Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation

Metasploitable2：侦察与 UnrealIRCd 后门利用 免责声明 Metasploitable2 是一台故意设计为存在漏洞的虚拟机，专门为安全培训和练习而发布。本项目完全在我拥有并控制的隔离虚拟实验环境中进行，仅用于教育目的。 概述 本项目记录了对 Metasploitable2 的完整攻击链：在网络中发现主机、对其服务进行指纹识别、识别 UnrealIRCd 中的已知后门，并利用该后门获取 shell 访问权限。 目标 练习并记录标准的从侦察到利用的工作流程：找到目标、枚举其服务、识别可利用的漏洞、利用该漏洞，并确认所获得的访问权限级别。 实验环境...

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

CVE-2026-93689

CVE-2026-93689 is a null pointer dereference in the WinFsp kernel driver's Fast I/O device control handler, affecting versions through 2.2.26215 . The handler fails to validate the volume context before use, allowing an unprivileged local user to trigger a denial of service (system crash) by open...

supahunter

Supabase Hunter OP Mode Advanced Reconnaissance & Exploitation Tool for Supabase Instances. SupaHunter is a powerful Python tool designed to identify, analyze, and exploit misconfigured Supabase projects. It goes beyond simple table enumeration, offering deep inspection capabilities, Selenium-bas...

CVE-2026-47888

A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service. Mitigation Disable...

EUVD-2025-210934

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0–6.3.0.2, 6.2.4.0–6.2.4.4, and Standard Edition 6.2.4.0–6.2.4.4 could allow an unauthenticated remote attacker to cause a denial of service in the email service due to improper control of interaction frequency (CWE-799). The CVSS 3...

EUVD-2026-82948

gptpmiqualifyannounce in subsys/net/l2/ethernet/gptp/gptpmi.c walks the Path Trace TLV of a received IEEE 802.1AS Announce message, comparing each clock identity against the local one. The loop bound was taken solely from the attacker-controlled wire field announce-stepsremoved accepted up to 254...

CVE-2026-16514

CVE-2026-16514 is an out-of-bounds read in Zephyr RTOS 's gPTP implementation (gptp_mi_qualify_announce() in subsys/net/l2/ethernet/gptp/gptp_mi.c). The loop bound for validating the Path Trace TLV of IEEE 802.1AS Announce messages was taken from the attacker-controlled steps_removed field (up to...

CVE-2026-93653

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline...