EtwLeakKernel

EtwLeakKernel Questo repository contiene un PoC per un programma che utilizza ETW per far trapelare indirizzi di memoria del kernel. Lo fa creando un consumer potenzialmente verso quasi qualsiasi provider, dato che quasi tutti fanno trapelare indirizzi del kernel e richiedendo uno stack trace. Un...

CVE-2023-6702

RCE 1day du Renderer Chrome via une confusion de type dans la trace de pile asynchrone CVE-2023-6702 Résumé Cette vulnérabilité permettait à un attaquant distant d'exécuter du code arbitraire dans le processus de rendu Chrome. Il y avait une vérification de type insuffisante dans le code de gesti...

CVE-2026-56139

camel-undertow Rest DSL Reproducer de Divulgação de Stack-Trace do muteException CVE-2026-56139 Este projeto demonstra um problema de divulgação de informações no consumidor Rest DSL do camel-undertow do Apache Camel, registrado como CVE-2026-56139. A opção muteException controla se o detalhe de...

CVE-2023-47459

CVE-2023-47459 الوصف تم اكتشاف ثغرة أمنية في Knovos Discovery الإصدار 22.67.0 تسمح لمهاجم عن بُعد بالوصول إلى معلومات سرية باستخدام المكوّنات التالية: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName و /DiscoveryReview/Service/WorkProduct.svc/BindRelatedDocumentsInformation و...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

CVE-2026-49365

CVE-2026-49365 — Divulgazione dello stack-trace di muteException in camel-netty-http / camel-undertow Reproducer proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime:...

EUVD-2026-65535

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

Microweber < 1.2.11 - CRLF Injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0666 info: name: Microweber 1.2.11 - CRLF Injection author: ritikchaddha severity: high description: | CRLF Injection leads to Sta...

CVE-2025-32044

CVE-2025-32044 — Esposizione dei dati utente tramite REST API non autenticata in Moodle Fuga degli argomenti dello stack trace → Nomi, Email, Hash delle password Panoramica CVE-2025-32044 è una vulnerabilità di divulgazione di informazioni non autenticata ad alta gravità CVSS 7.5 in Moodle LMS...

CVE-2026-76210

phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...

CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export

phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...

CVE-2026-76210

phpMyFAQ before 4.1.6 (some sources cite 4.1.7) contains an inadequate HTML sanitization flaw in FAQ answers before PDF generation via TCPDF . An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory (e.g...

CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export

phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...

PT-2026-78392

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description Insufficient sanitization of HTML in FAQ answers occurs before generating PDFs via TCPDF. An attacker with permissions to create or edit FAQ content can embed an tag with a src attribute referencing...

GO-2026-6181 Verbose stack trace disclosure in RC API error responses in github.com/rclone/rclone

Verbose stack trace disclosure in RC API error responses in github.com/rclone/rclone...

CVE-2026-73844

CKAN MCP Server prior to 0.4.112 is vulnerable to information disclosure via verbose error reflection. When the server is pointed at or redirected/SSRF’d to a non-CKAN host or when an internal exception occurs, the response may include raw upstream content, hostnames, internal IPs, DB errors, and...

CVE-2026-73844 CKAN MCP Server: Information disclosure via verbose error reflection

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at or redirected/SSRF'd to a host that returns a...

Sensitive Information Disclosure

Apache Camel Netty HTTP component is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of exception responses, where processing errors return full Java stack traces instead of suppressing them, allowing attackers to obtain sensitive information such as...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fixed a crash in perf when using the new isusertask helper. To obtain a user space stacktrace, the current task must be a user task that has executed in user space. It was previously possible to determine whether a...

rclone: Verbose Stack Trace Disclosure in RC API Error Responses

Summary When an RC API call triggers a panic recovered by the job runner, the full Go stack trace is included in the JSON error response. This leaks internal file paths, Go module versions, goroutine state, and memory addresses to the API caller. Details The panic recovery in...