344062 matches found
CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
CVE-2026-82908
MSI Dragon Center up to version 2.0.155.0 contains an integer overflow in the function MmioWritePath within the driver NTIOLib_X64.sys (component: MMIO Write Path Handler). The overflow is triggered by manipulating the argument count or elementSize parameters. Exploitation requires a local attack...
EUVD-2026-68766
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
CVE-2026-82623
A flaw was found in open62541. A remote attacker could exploit a use-after-free vulnerability in the UADataValuebackendcopyRange function within the History Backend component. This flaw could lead to a denial of service, making the affected system unavailable. Mitigation Update open62541 to versi...
Exploit for Cross-site Scripting in Interzen Zencrm
ZenShare Suite - Vulnerability Disclosure This repository con...
CVE-2026-82906 sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication
A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...
CVE-2026-82906
A missing authentication flaw in sdcb chats versions up to 1.12.0 affects the Signed File Download Endpoint , specifically the DownloadPublic function in src/BE/web/Controllers/Chats/Files/FileController.cs. An unauthenticated remote attacker with high complexity can exploit this to achieve low c...
EUVD-2026-68763
A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...
CVE-2026-82906 sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication
A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...
GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering
A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...
Exploit for Cross-site Scripting in Interzen Zenshare_Suite
ZenShare Suite - Vulnerability Disclosure This repository con...
React2Shell
React2Shell 📌 React2Shell CVE-2025-55182 React2Shell एक महत्वपूर्ण रिमोट कोड निष्पादन RCE कमजोरी का अनौपचारिक नाम है जो React Server Components RSC और Next.js जैसे संबंधित फ्रेमवर्क को प्रभावित करता है। इसकी गंभीरता और संभावित प्रभाव ने इसे वेब डेवलपमेंट और सुरक्षा समुदायों में एक प्रमुख चिंता का...
CVE-2026-82905 sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgery
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs of the component fetch-tools Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The...
CVE-2026-82905
A server-side request forgery (SSRF) vulnerability exists in sdcb chats versions up to 1.12.0 , specifically in the McpController function within the fetch-tools endpoint (file: src/BE/web/Controllers/Users/Mcps/McpController.cs). The vulnerability is exploitable remotely with low complexity and ...
EUVD-2026-68740
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs of the component fetch-tools Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The...
CVE-2026-82905 sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgery
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs of the component fetch-tools Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The...
e-cology
تنفيذ التعليمات البرمجية عن بُعد في مكوّن Beanshell في Weaver e-cology OA Windows Linux ملاحظة root@kitploit: 检测目标系统os.name（因为目标系统是windows的话，执行set等命令，需要手动敲cmd.exe /c set） 使用Unicode绕过exec过滤，部分站点 Payload root@kitploit: bsh.script=exec'whoami'; unicode bypass...
CVE-2026-83497
Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql endpoint...
DEBIAN-CVE-2026-82820
A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amfstringnew of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made publi...