Lucene search
+L

20945 matches found

Github Security Blog
Github Security Blog
โ€ขadded 2025/12/09 5:19 p.m.โ€ข20 views

Neuron MySQLSelectTool โ€œread-onlyโ€ bypass via `SELECT ... INTO OUTFILE` (file write โ†’ potential RCE)

Impact MySQLSelectTool is intended to be a read-only SQL tool e.g., for LLM agent querying. However, validation based on the first keyword e.g., SELECT and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can...

8.2CVSS9.2AI score0.00289EPSS
SaveExploits0References5Affected Software1
GithubExploit
GithubExploit
โ€ขadded 2025/12/09 11:09 a.m.โ€ข204 views

Exploit for Deserialization of Untrusted Data in Facebook React

๐Ÿ›ก๏ธ RSC Sentinel Pro Advanced React Server Components R...

10CVSS6.8AI score0.99802EPSS
SaveExploits390
GithubExploit
GithubExploit
โ€ขadded 2025/12/09 10:41 a.m.โ€ข165 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Advanced Scanner A full-featured exploitation ut...

10CVSS7.9AI score0.99802EPSS
SaveExploits390
IBM Security Bulletins
IBM Security Bulletins
โ€ขadded 2025/12/09 8:59 a.m.โ€ข14 views

Security Bulletin: Multiple Vulnerabilities affects IBM License Metric Tool v9.

Summary Multiple vulnerabilities have been remediated in components used by IBM License Metric Tool. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules,...

8.1CVSS7.4AI score0.00685EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
โ€ขadded 2025/12/09 4:25 a.m.โ€ข179 views

Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-664...

10CVSS6.9AI score0.99802EPSS
SaveExploits404
EUVD
EUVD
โ€ขadded 2025/12/09 3:31 a.m.โ€ข11 views

EUVD-2023-60113

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

6AI score0.00199EPSS
SaveExploits0References5
Fedora
Fedora
โ€ขadded 2025/12/09 1:38 a.m.โ€ข14 views

[SECURITY] Fedora 41 Update: abrt-2.17.8-1.fc41

abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality...

8.8CVSS6.3AI score0.00639EPSS
SaveExploits1
NVD
NVD
โ€ขadded 2025/12/09 1:16 a.m.โ€ข11 views

CVE-2023-53793

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

0.00199EPSS
SaveExploits0References4
OSV
OSV
โ€ขadded 2025/12/09 1:16 a.m.โ€ข8 views

DEBIAN-CVE-2023-53793

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

5.2AI score0.00199EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2025/12/09 1:16 a.m.โ€ข10 views

UBUNTU-CVE-2023-53793

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

5.7AI score0.00199EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
โ€ขadded 2025/12/09 12:26 a.m.โ€ข8 views

SUSE CVE-2025-13654

A stack buffer overflow vulnerability exists in the bufferget function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read...

7.5CVSS8.1AI score0.00879EPSS
SaveExploits1References3
Cvelist
Cvelist
โ€ขadded 2025/12/09 12:00 a.m.โ€ข39 views

CVE-2023-53793 perf tool x86: Fix perf_env memory leak

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

0.00199EPSS
SaveExploits0References4
CVE
CVE
โ€ขadded 2025/12/09 12:00 a.m.โ€ข31 views

CVE-2023-53793

CVE-2023-53793 affects the Linux kernel perf tool on x86; memory-leak in perf_env__read_cpuid (LeakSanitizer-detected) is fixed by a kernel/perf patch. Affected versions are addressed in vendor advisories; upgrade to the patched kernel/perf tool as remediation. If details are needed: root cause i...

6.1AI score0.00199EPSS
SaveExploits0References4
OSV
OSV
โ€ขadded 2025/12/09 12:00 a.m.โ€ข8 views

CVE-2023-53793 perf tool x86: Fix perf_env memory leak

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

6.3AI score
SaveExploits0References7
Debian CVE
Debian CVE
โ€ขadded 2025/12/09 12:00 a.m.โ€ข10 views

CVE-2023-53793

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

5.1AI score0.00199EPSS
SaveExploits0
Positive Technologies
Positive Technologies
โ€ขadded 2025/12/09 12:00 a.m.โ€ข9 views

PT-2025-49653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The perf tool within the Linux kernel contains a memory leak in the x86 CPUID detection mechanism. The leak occurs when using the perf env read cpuid function, triggered during CPUID...

5.9AI score0.00199EPSS
SaveExploits0
Packet Storm
Packet Storm
โ€ขadded 2025/12/09 12:00 a.m.โ€ข206 views

๐Ÿ“„ React 19.2.0 PHP Scanner / Remote Code Execution

This project delivers a PHP-based vulnerability scanner and remote code execution exploit for CVEโ€‘2025โ€‘55182 affecting React Server Components. It leverages RSC serialization weaknesses to execute arbitrary commands and validate successful exploitation...

10CVSS8.7AI score0.99802EPSS
SaveExploits390
Positive Technologies
Positive Technologies
โ€ขadded 2025/12/09 12:00 a.m.โ€ข14 views

PT-2025-50295

Name of the Vulnerable Software and Affected Versions Taguette versions prior to 1.5.2 Description Taguette is a qualitative research tool susceptible to an open redirect issue. Attackers can create malicious URLs that redirect authenticated users to arbitrary external websites. The application...

6.1CVSS5.9AI score0.00262EPSS
SaveExploits1References13
Packet Storm
Packet Storm
โ€ขadded 2025/12/09 12:00 a.m.โ€ข196 views

๐Ÿ“„ Cloudbleed Scanner

Cloudbleed Scanner is a comprehensive security tool designed to detect memory leak patterns similar to the 2017 Cloudbleed incident, where Cloudflare's reverse proxies leaked uninitialized memory containing sensitive data...

6.8AI score
SaveExploits0
Cvelist
Cvelist
โ€ขadded 2025/12/09 12:00 a.m.โ€ข38 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

0.00644EPSS
SaveExploits1References2
Rows per page
Query Builder