Lucene search
+L

649113 matches found

EUVD
EUVD
added 2026/09/18 3:54 p.m.7 views

EUVD-2026-83016

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation...

7.5CVSS0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 3:54 p.m.37 views

CVE-2026-10744 IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation...

7.5CVSS0.0027EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 3:51 p.m.32 views

CVE-2026-65969

OpenImageIO (a toolset for reading, writing, and manipulating image files used in VFX/animation) is affected by a signed 32-bit integer overflow in GifSplitPalette() (src/gif.imageio/gif.h). A truncated TGA input can leave a pending GIF frame that is processed during output close; the multiplicat...

5.5CVSS0.0013EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/18 3:41 p.m.6 views

CVE-2026-65970 OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::readnativescanlines return through an error path while...

5.3CVSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/18 3:41 p.m.8 views

EUVD-2026-83126

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::readnativescanlines return through an error path while...

5.3CVSS0.00373EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/18 3:41 p.m.18 views

CVE-2025-36045

IBM TS4300 Tape Library (versions 1.1.0.1 through 1.7.1.1) is affected by a denial-of-service vulnerability in its email service. Email-related functions in the web GUI and APIs did not enforce rate limiting, allowing an authenticated user to repeatedly invoke email-sending requests and generate ...

4.3CVSS0.00262EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 3:41 p.m.6 views

EUVD-2025-210956

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 3:35 p.m.10 views

CVE-2026-59181

OpenImageIO , a toolset for reading and manipulating image files in VFX/animation, is affected by a stack buffer overflow in its Cineon reader. A crafted Cineon file can supply a numberOfElements value exceeding the format maximum of eight; CineonInput::open() uses this unchecked value as a loop ...

6.1CVSS0.00198EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/18 3:35 p.m.7 views

EUVD-2026-83122

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numberofelements value greater than the format maximum of eight. cineoninput::open...

6.1CVSS0.00198EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/18 3:17 p.m.6 views

Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation

Metasploitable2:侦察与 UnrealIRCd 后门利用 免责声明 Metasploitable2 是一台故意设计为存在漏洞的虚拟机,专门为安全培训和练习而发布。本项目完全在我拥有并控制的隔离虚拟实验环境中进行,仅用于教育目的。 概述 本项目记录了对 Metasploitable2 的完整攻击链:在网络中发现主机、对其服务进行指纹识别、识别 UnrealIRCd 中的已知后门,并利用该后门获取 shell 访问权限。 目标 练习并记录标准的从侦察到利用的工作流程:找到目标、枚举其服务、识别可利用的漏洞、利用该漏洞,并确认所获得的访问权限级别。 实验环境...

7.5CVSS6AI score0.83534EPSS
SaveExploits15
NVD
NVD
added 2026/09/18 3:17 p.m.4 views

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 3:06 p.m.10 views

CVE-2026-93689

CVE-2026-93689 is a null pointer dereference in the WinFsp kernel driver's Fast I/O device control handler, affecting versions through 2.2.26215 . The handler fails to validate the volume context before use, allowing an unprivileged local user to trigger a denial of service (system crash) by open...

6.8CVSS0.00116EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/18 2:57 p.m.9 views

supahunter

Supabase Hunter OP Mode Advanced Reconnaissance & Exploitation Tool for Supabase Instances. SupaHunter is a powerful Python tool designed to identify, analyze, and exploit misconfigured Supabase projects. It goes beyond simple table enumeration, offering deep inspection capabilities, Selenium-bas...

6.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/18 2:38 p.m.9 views

CVE-2026-47888

A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service. Mitigation Disable...

7.5CVSS0.00324EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/18 2:33 p.m.6 views

EUVD-2025-210934

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS0.0042EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 2:33 p.m.37 views

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 2:33 p.m.17 views

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0–6.3.0.2, 6.2.4.0–6.2.4.4, and Standard Edition 6.2.4.0–6.2.4.4 could allow an unauthenticated remote attacker to cause a denial of service in the email service due to improper control of interaction frequency (CWE-799). The CVSS 3...

5.3CVSS0.0042EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 2:30 p.m.10 views

EUVD-2026-82948

gptpmiqualifyannounce in subsys/net/l2/ethernet/gptp/gptpmi.c walks the Path Trace TLV of a received IEEE 802.1AS Announce message, comparing each clock identity against the local one. The loop bound was taken solely from the attacker-controlled wire field announce-stepsremoved accepted up to 254...

4.3CVSS0.00238EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/18 2:30 p.m.11 views

CVE-2026-16514

CVE-2026-16514 is an out-of-bounds read in Zephyr RTOS 's gPTP implementation (gptp_mi_qualify_announce() in subsys/net/l2/ethernet/gptp/gptp_mi.c). The loop bound for validating the Path Trace TLV of IEEE 802.1AS Announce messages was taken from the attacker-controlled steps_removed field (up to...

4.3CVSS0.00238EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/18 2:13 p.m.8 views

CVE-2026-93653

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline...

5.5CVSS0.00113EPSS
SaveExploits0
Rows per page
Query Builder