Lucene search
+L

5857 matches found

Kitploit
Kitploit
•added 2026/10/23 3:32 p.m.•89 views

pe_tree

PE Tree PE Tree is a Python module for viewing Portable Executable PE files in a tree-view using pefile and PyQt5. It can also be used with IDA Pro, Ghidra, Volatility, Rekall and minidump to view and dump in-memory PE files, as well as perform import table reconstruction. Table of contents 1...

6.1AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/10/23 3:23 p.m.•11 views

CVE-2026-98855

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When an error occurs while adding a property to a device tree overlay changeset, the allocated property is freed during error cleanup but remains tracked, leading to a second release double-free when the overlay node is torn...

4.4CVSS5.9AI score0.00157EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/10/23 3:23 p.m.•11 views

CVE-2026-98854

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When applying an overlay fails during identifier allocation, the error cleanup routine incorrectly treats negative error codes as valid identifiers. A local user could trigger this vulnerability during resource allocation...

4.1CVSS5.5AI score0.00156EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/23 3:17 p.m.•11 views

CVE-2026-46531

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...

5.5CVSS0.00204EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/23 2:42 p.m.•9 views

EUVD-2026-109087

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...

5.5CVSS5.8AI score0.00204EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/10/23 2:42 p.m.•11 views

CVE-2026-46531

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...

5.5CVSS5.8AI score0.00204EPSS
SaveExploits0
osv_debian
osv_debian
•added 2026/10/23 1:17 p.m.•11 views

DEBIAN-CVE-2026-98959

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfsdiritem item that packs multiple xattrs and then we replace the value of one of them with the setxattr2 family of syscalls with another...

9.8CVSS6.5AI score0.00607EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/23 1:17 p.m.•10 views

CVE-2026-98959

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfsdiritem item that packs multiple xattrs and then we replace the value of one of them with the setxattr2 family of syscalls with another...

9.8CVSS0.00607EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/23 12:20 p.m.•11 views

CVE-2026-98992

In the Linux kernel, the following vulnerability has been resolved: namespace: don't copy an unmounted mount tree maycopytree accepts a mount whose root is an nsfs or pidfs file before it checks whether that mount is mounted. This exception exists for nsfs and pidfs mounts. They are part of no...

6.1AI score0.00168EPSS
SaveExploits0
CVE
CVE
•added 2026/10/23 12:19 p.m.•11 views

CVE-2026-98959

The Linux kernel contains a vulnerability in the btrfs filesystem where replacing an extended attribute (xattr) value with a different size can cause filesystem corruption. When multiple xattrs are packed into the same btrfs_dir_item (due to matching crc32c hashes), using the setxattr(2) syscall ...

9.8CVSS6.3AI score0.00607EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/23 12:19 p.m.•24 views

CVE-2026-98959 btrfs: fix xattr replace when multiple xattrs are packed in the same item

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfsdiritem item that packs multiple xattrs and then we replace the value of one of them with the setxattr2 family of syscalls with another...

9.8CVSS0.00607EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/23 12:19 p.m.•8 views

EUVD-2026-108753

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfsdiritem item that packs multiple xattrs and then we replace the value of one of them with the setxattr2 family of syscalls with another...

6.3AI score0.00607EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/23 12:19 p.m.•15 views

CVE-2026-98959 btrfs: fix xattr replace when multiple xattrs are packed in the same item

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfsdiritem item that packs multiple xattrs and then we replace the value of one of them with the setxattr2 family of syscalls with another...

9.8CVSS6.3AI score
SaveExploits0References8
osv_cleanstart
osv_cleanstart
•added 2026/10/23 12:36 a.m.•9 views

CLEANSTART-2026-SU80167 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the argo-cd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

6.1CVSS6.6AI score0.00223EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/23 12:36 a.m.•11 views

CLEANSTART-2026-RL86772 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the argo-cd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

6.1CVSS6.6AI score0.00223EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-98959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfsdiritem item that packs multiple xattrs and then we replace the valu...

9.8CVSS6.3AI score0.00607EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/23 12:00 a.m.•8 views

PT-2026-122141

Name of the Vulnerable Software and Affected Versions Cacti versions 1.2.27 through 1.2.30 Description An authenticated stored second-order SQL injection exists in the automation tree rule item handler. A user with the Automation realm General Administration role can store an arbitrary SQL fragme...

5.5CVSS6AI score0.00204EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-114094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a...

8.8CVSS6.4AI score0.00671EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-113793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter ...

6CVSS6.1AI score0.00466EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/10/22 4:00 p.m.•11 views

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Summary Pillow's documented PDF append path can spend disproportionate CPU time on a compact malformed PDF page tree. An attacker who can supply an existing PDF to an application that appends an image with Image.save..., format="PDF", append=True can provide a malformed /Pages tree where each lev...

8.2CVSS6AI score0.00515EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder