Lucene search
+L

1044 matches found

Kitploit
Kitploit
•added 2026/10/23 9:01 p.m.•22 views

tweets_analyzer

Simple Twitter Profile Analyzer The goal of this simple python script is to analyze a Twitter profile through its tweets by detecting: Average tweet activity, by hour and by day of the week Timezone and language set for the Twitter interface Sources used mobile application, web browser,...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/23 8:05 p.m.•25 views

CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar function has a heap buffer overflow vulnerability when handling timezone formatting. By setting an overly long POSIX timezone abbreviation, an attacker can trigger an out-of-bounds write to a fixed...

8.8CVSS8.1AI score0.00662EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/10/23 11:07 a.m.•4 views

pfsense-timezone-phpini

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-timezone-phpini pfsense-timezone-phpini Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org system.php writes $POST'timezone' with no inarray against systemgettimezonelist. istimezone...

6AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/19 10:32 a.m.•21 views

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

10CVSS8.8AI score0.05373EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/15 7:17 p.m.•22 views

CVE-2026-111222

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add autoprependfile pointing at /var/db/zoneinfo,...

7.5CVSS0.0096EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/15 6:46 p.m.•18 views

CVE-2026-111222

Netgate pfSense CE versions through 2.9.0 are vulnerable to a php.ini injection via the timezone setting. This flaw occurs because the system fails to validate the input provided for the timezone, allowing authenticated users with General Setup privileges to inject malicious directives. By embedd...

7.5CVSS5.9AI score0.0096EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2026/10/15 6:46 p.m.•39 views

CVE-2026-111222 Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add autoprependfile pointing at /var/db/zoneinfo,...

7.5CVSS0.0096EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•6 views

CVE-2026-111222: Improper Neutralization of CRLF Sequences

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add autoprependfile pointing at /var/db/zoneinfo,...

7.5CVSS5.9AI score0.0096EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•22 views

PT-2026-107804

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.2.2d Brocade Fabric OS versions 10.0.0 through 10.0.0a1 Description An OS command injection issue exists in the time and zone management subsystem. The system fails to sanitize input values when updating...

8.6CVSS6.4AI score0.02572EPSS
SaveExploits0References6
Broadcom
Broadcom
•added 2026/10/06 12:00 a.m.•19 views

Authenticated Privilege Escalation via Command Injection in Timezone Configuration Processing

: An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values...

8.6CVSS6.5AI score0.02572EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•12 views

CentOS Linux 7 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787648234)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787648234 advisory. - A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the...

8.8CVSS7.5AI score0.02035EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

AlmaLinux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.6:CLSA-2026:1787649624)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787649624 advisory. - Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating syst...

8.8CVSS7.6AI score0.00662EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2026/09/28 6:08 a.m.•21 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/28 6:07 a.m.•28 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/28 6:07 a.m.•22 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/28 4:16 a.m.•27 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/28 4:09 a.m.•24 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/28 4:09 a.m.•24 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/23 9:12 p.m.•26 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/23 5:12 p.m.•21 views

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

8.8CVSS7.9AI score0.00662EPSS
SaveExploits1References5
Rows per page
Query Builder