936 matches found
POC-CVE-2023-3244
Proof of Concept für CVE-2023-3244 Hallo, dies ist ein einfacher Proof of Concept PoC für die Sicherheitslücke CVE-2023-3244, die im WordPress-Plugin "comments-like-dislike" gefunden wurde. Die Schwachstelle betrifft Plugin-Versionen bis einschließlich 1.2.0. Um diese Schwachstelle auszunutzen,...
CVE-2024-27348
CVE-2024-27348 Questa è una repository per la vulnerabilità di Remote Code Execution di Apache HugeGraph CVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services: web...
CVE-2018-16167
Ordine di installazione ed esecuzione 0. Installazione di LogonTracer Scarica da Docker Hub la versione 1.2.0 di LogonTracer, quella in cui è stata trovata la vulnerabilità. root@kitploit: $docker pull jpcertcc/docker-logontracer:v1.2.0 1. Esecuzione di LogonTracer Avvia il contenitore con il...
CVE-2025-11844-smolagents
🔐 Framework de Simulação de Injeção XPath do Smolagents CVE-2025-11844 Um sandbox educacional de auditoria e scanner dinâmico de prova de conceito que demonstra a vulnerabilidade de Injeção XPath encontrada na biblioteca smolagents da Hugging Face até a versão 1.2.0. 🔍 Perfil da Vulnerabilidade...
CVE-2026-67592
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2....
UBUNTU-CVE-2026-67592
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2....
CVE-2026-67589
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...
UBUNTU-CVE-2026-67588
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...
CVE-2026-67592 Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2....
EUVD-2026-53096
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2....
CVE-2026-67591 Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded
An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...
CVE-2026-67589
Technical details (affected products, versions, root cause, and fixes) are not publicly available in the provided documents; monitor for updates.
CVE-2026-67589 Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...
Linux Distros Unpatched Vulnerability : CVE-2026-67592
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage...
Linux Distros Unpatched Vulnerability : CVE-2026-67590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid...
CLSA-2026-1774916708 TuxCare security update for minimist (5 CVEs)
TuxCare rebuilt minimist to address 5 CVEs. Fixed in 1.2.0-tuxcare.1...
CLSA-2026-1774225211 TuxCare security update for tough-cookie (5 CVEs)
TuxCare rebuilt tough-cookie to address 5 CVEs. Fixed in 1.2.0-tuxcare.1...
Linux Distros Unpatched Vulnerability : CVE-2026-49834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or...
CVE-2026-15069
Summary: IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 are affected by a vulnerability that could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation. Affected products/versions: IBM Engineering AI Hub v1.0.0, v1.1.0, and v1...