Exploit for CVE-2026-2256

CVE-2026–2256 PoC Executive Summary A critical command in...

PT-2026-7089

Name of the Vulnerable Software and Affected Versions Pydantic-AI MCP Run Python tool affected versions not specified Description The Pydantic-AI MCP Run Python tool is configured with an overly permissive Deno sandbox configuration. This allows Python code executed within the sandbox to access t...

Oki、Ricoh和Murata Machinery多款产品 代码问题漏洞

The OKI Configuration Tool is a product of the OKI company. The OKI Configuration Tool is a configuration management tool. The RICOH SP C740 is a product of the Japanese RICOH company. The RICOH SP C740 is a color laser printer. The RICOH PC6000L is a color printer. There are code vulnerabilities...

📄 Novell GroupWise 2012 Traversal / Shell Upload

This code exploits the directory traversal vulnerability in Novell GroupWise 2012 before Support Pack 1 to steal files, and attempts to upload a web shell payload if possible, making it an effective penetration testing tool...

SUSE CVE-2026-24844

melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker who can provide build input values, but not modify pipeline definitions, could execute arbitrary shell commands if the pipeline uses $vars. or $inputs. substitutions in...

SUSE CVE-2026-25121

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, a path traversal vulnerability was discovered in apko's dirFS filesystem abstraction. An attacker who can supply a malicious APK package e.g., via a compromised or typosquatte...

CVE-2020-37119

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a...

CVE-2026-23741

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the asterisk/contrib/scripts/astcoredumper runs as root, as noted by the NOTES tag on line 689 of the astcoredumper file. The script will source the conten...

CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 GNU inetutils Telnet Detector A safe, passive...

3DP-MANAGER 信任管理问题漏洞

3DP-MANAGER is a proxy tool developed by DenPiligrim’s individual developers. Versions of 3DP-MANAGER 2.0.1 and earlier contained a vulnerability related to trust management. This vulnerability stemmed from the automatic creation of management accounts with known default credentials during the...

YARA-X 1.13.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

@abdul-kissflow/form-field-scripts (0.0.7), @ableaura/ableui (0.1.0) +2561 more potentially affected by CVE-2025-68458 via webpack (>=5.49.0, <=5.104.0)

webpack NPM version =5.49.0, =0.0.1, =0.0.1, =0.0.1, =4.9.5, =0.0.1, =1.0.0, =1.0.0-rc2, =2.0.5-beta.11, =1.0.7-beta.4, =1.0.7-beta.4, =1.2.1-alpha.0 and more Source cves: CVE-2025-68458 Source advisory: SNYK:JS-WEBPACK-15235959...

@abdul-kissflow/form-field-scripts (0.0.7), @ableaura/ableui (0.1.0) +2561 more potentially affected by CVE-2025-68458 via webpack (>=5.49.0, <=5.104.0)

webpack NPM version =5.49.0, =0.0.1, =0.0.1, =0.0.1, =4.9.5, =0.0.1, =1.0.0, =1.0.0-rc2, =2.0.5-beta.11, =1.0.7-beta.4, =1.0.7-beta.4, =1.2.1-alpha.0 and more Source cves: CVE-2025-68458 Source advisory: OSV:GHSA-8FGC-7CC6-RX7X...

@abdul-kissflow/form-field-scripts (0.0.7), @ableaura/ableui (0.1.0) +2561 more potentially affected by CVE-2025-68157 via webpack (>=5.49.0, <=5.103.0)

webpack NPM version =5.49.0, =0.0.1, =0.0.1, =0.0.1, =4.9.5, =0.0.1, =1.0.0, =1.0.0-rc2, =2.0.5-beta.11, =1.0.7-beta.4, =1.0.7-beta.4, =1.2.1-alpha.0 and more Source cves: CVE-2025-68157 Source advisory: OSV:GHSA-38R7-794H-5758...

CVE-2020-37119

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a...

CVE-2020-37119

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a...

EUVD-2020-31023

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

CVE-2020-37119

CVE-2020-37119 affects Nsauditor 3.0.28 and 3.2.1.0. A buffer overflow in the DNS Lookup tool allows an attacker to overwrite memory with a crafted DNS query payload, bypass ASLR, and execute shellcode. Reported exploit details indicate a three-byte overwrite, with potential for arbitrary code ex...

Malicious code in web3-meme-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62aebca1848d232cb70d5bacf954626ca7d0fd1d5680bb8ab45777aa9347f5ed Disguised as metadata checker, packages are designed to exfiltrate hardcoded or given data to an obfuscated remote target --- Category: MALICIOUS - The campaig...