16590 matches found
PT-2025-37961
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the io uring/kbuf subsystem where buffer lengths are not consistently read. This is due to the use of potentially unstable reads of user-space mappe...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 PoC Educational Use Only Details about this C...
Exploit for CVE-2007-2447
CVE-2007-2447 Samba Exploit A Rust implementation of the CVE-...
The 5 Golden Rules of Safe AI Adoption
Employees are experimenting with AI at record speed. They are drafting emails, analyzing data, and transforming the workplace. The problem is not the pace of AI adoption, but the lack of control and safeguards in place. For CISOs and security leaders like you, the challenge is clear: you don’t wa...
The 5 Golden Rules of Safe AI Adoption
Employees are experimenting with AI at record speed. They are drafting emails, analyzing data, and transforming the workplace. The problem is not the pace of AI adoption, but the lack of control and safeguards in place. For CISOs and security leaders like you, the challenge is clear: you don't wa...
Linux Distros Unpatched Vulnerability : CVE-2020-28473
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate...
Linux Distros Unpatched Vulnerability : CVE-2021-40565
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using...
Linux Distros Unpatched Vulnerability : CVE-2020-14152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory...
Linux Distros Unpatched Vulnerability : CVE-2021-40562
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmxenqueueordispatch function in reframenalu.c,...
EcoStruxure Building Operation Enterprise Central Resource Consumption Code Execution
The vulnerabilities of the EcoStruxure Building Operation Enterprise Central, EcoStruxure Building Operation Enterprise Server, and the EcoStruxure Workstation interface are related to uncontrolled resource consumption. Exploiting these vulnerabilities could allow a remote attacker to execute...
Linux Distros Unpatched Vulnerability : CVE-2019-20044
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the...
Linux Distros Unpatched Vulnerability : CVE-2021-39907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU...
Linux Distros Unpatched Vulnerability : CVE-2021-40563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmxcreateavcdecoderconfig function in reframenalu.c when...
Linux Distros Unpatched Vulnerability : CVE-2024-42325
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc...
Linux Distros Unpatched Vulnerability : CVE-2022-36083
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JOSE is JSON Web Almost Everything - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers,...
Linux Distros Unpatched Vulnerability : CVE-2022-3283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all...
Linux Distros Unpatched Vulnerability : CVE-2021-28698
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map...
SUSE CVE-2025-43960
Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service memory consumption via a crafted serialized payload e.g., using s:1000000000, leading to a PHP Object Injection issue. Remote, unauthenticated attackers can trigger this by sending a malicious serialized object, which force...
GraphQL Armor Max-Depth Plugin Bypass via fragment caching
Summary A query depth restriction using the max-depth can be bypassed if ignoreIntrospection is enabled which is the default configuration by naming your query/fragment schema. Details In the countDepth function, we have the following code that calculates the depth of a used fragment: typescript...
