CVE-2026-68006

A flaw was found in Puma. An attacker could exploit a vulnerability within the HTTP parser component to execute arbitrary code. This could allow the attacker to take control of the affected system...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution RCE Exploit Simulator Demo Screenshot Simulator interface demonstrating the exploit chain 📌 Overview This repository contains an educational simulation of CVE-2025-30065, a critical Remote Code Execution vulnerability in Apache Parquet...

Schwarze-Sonne-RAT

Schwarze-Sonne-RAT SS-RAT Schwarze-Sonne-Remote-Access-Trojan...

CVE-2020-13159

CVE-2020-13159 - Artica Proxy 4.30.000000 Community Edition 이전 버전에서 다중 OS 명령 주입 취약점 제품 설명: Artica Tech는 일반적으로 대기업 및 다국적 기업의 전유물이었던 강력하면서도 사용하기 쉬운 솔루션을 제공합니다. 단 99€의 시작 가격과 62,000개 이상의 활성 서버를 보유한 Artica Proxy는 지난 10년간 오픈 소스 프로젝트로 개발되어 중소기업과 공공 기관이 저렴한 비용으로 조직과 직원을 인터넷 위험으로부터 보호할 수 있도록 도와왔습니다. 설명:...

Adobe ColdFusion - Unrestricted File Upload Remote Code Execution

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. id: CVE-2018-15961 info: name: Adobe ColdFusion - Unrestricted File Upload...

Atlassian Bitbucket - Remote Command Injection

Atlassian Bitbucket Server and Data Center is susceptible to remote command injection. Multiple API endpoints can allow an attacker with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request, thus making it possible to obtain...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscpi: Fixed string overflow in the SCPI genpd driver. Without the bounds checks for scpipd-name, a buffer overflow could occur when copying the SCPI device name from the corresponding device tree node. This occurs...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: A consistency check is performed on the mailbox/SMT channel. Upon receiving a completion interrupt, the shared memory area is accessed to retrieve the message header first. If the message sequence number...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Fixed the enumeration of protocols in the base protocol. When enumerating the protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of protocols returned is currently validated ...

The vulnerability of the Internal Operations component of the Oracle Spares Management software allows a perpetrator to gain full control over the system.

The vulnerability of the Internal Operations component of the Oracle Spares Management software lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to gain full control over the system through HTTP requests...

Malicious code in @aircanada/navigation-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78d6c89dae0e934ca5564921316f878b55ca1e3fb9bdfebbc8a04e07708de03c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-32002-PoC_Chinese

Resumen de la vulnerabilidad CVE-2024-32002 ⚠️¡Atención!: ¡No clone este repositorio! ⚠️ Descripción CVE-2024-32002 es una grave vulnerabilidad de seguridad descubierta en el software Git. Esta vulnerabilidad permite que un atacante remoto ejecute código arbitrario en sistemas afectados a través de...

The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software, allowing a hacker to gain full control over the system

The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system...

The vulnerability of the R7WebsSecurityHandler() function in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device, which allows a hacker to gain full control over the system

The vulnerability of function R7WebsSecurityHandler in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device for routers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Malicious code in 3layerdipstackp92wd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ad222e92bc4bc559da6b1833c4858b3b2ded57181181598612d0584e308dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-rryi25y4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b734b8de7bd5f190910f05a5b279f4242f9a1a55e98957d4002514e9dfacb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain full control over the system.

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain full control over the system...

The vulnerability of the OID LDAP Server component of the Oracle Internet Directory catalog service in the Oracle Fusion Middleware software platform allows a hacker to gain full control over the system.

The vulnerability of the OID LDAP Server component of the Oracle Internet Directory service in the Oracle Fusion Middleware software platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain full control over the system using the LDAP...

CVE-2026-17429

IBM Power Systems firmware (FW1120.00, FW1110.00-FW1110.30, FW1060.00-FW1060.80, FW950.00-FW950.H2, OP940.00-OP940.a1) has a CWE-863 incorrect authorization flaw in the BMC/FSP-host interface. A privileged BMC/FSP attacker can write arbitrary hardware control registers, gaining full host and part...

CVE-2026-20358

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...