Lucene search
+L

47 matches found

Kitploit
Kitploit
•added 2026/10/25 12:29 a.m.•14 views

crack

crackserver XMLRPC Server & Client for hash cracking crackserver.py - server component crackclient.py - client component crack.py - same cracking functionality but performed locally instead of client / server Copyright 2011 Stephen Haywood aka AverageSecurityGuy...

6.1AI score
SaveExploits0References1
osv_pysec
osv_pysec
•added 2026/07/13 3:46 p.m.•20 views

PYSEC-2026-2498 Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

Summary The Glances XML-RPC server glances -s, implemented in glances/server.py does not validate the HTTP Host header, leaving it vulnerable to DNS rebinding attacks. CVE-2026-32632 patched in 4.5.2 added TrustedHostMiddleware to the REST/WebUI server; the MCP server has had equivalent protectio...

5.3CVSS5.9AI score0.00166EPSS
SaveExploits0References6
NVD
NVD
•added 2026/06/25 7:16 p.m.•30 views

CVE-2026-46608

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server glances -s introduced a configurable CORS origin list in version 4.5.3 as a mitigation for CVE-2026-33533. However, the implementation silently falls back to Access-Control-Allow-Origin:...

7.4CVSS0.00401EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2026/06/22 9:31 p.m.•37 views

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

Summary The Glances XML-RPC server glances -s, implemented in glances/server.py does not validate the HTTP Host header, leaving it vulnerable to DNS rebinding attacks. CVE-2026-32632 patched in 4.5.2 added TrustedHostMiddleware to the REST/WebUI server; the MCP server has had equivalent protectio...

5.3CVSS5.9AI score0.00166EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2026/06/22 9:31 p.m.•26 views

GHSA-W856-8P3R-P338 Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

Summary The Glances XML-RPC server glances -s, implemented in glances/server.py does not validate the HTTP Host header, leaving it vulnerable to DNS rebinding attacks. CVE-2026-32632 patched in 4.5.2 added TrustedHostMiddleware to the REST/WebUI server; the MCP server has had equivalent protectio...

5.3CVSS5.9AI score0.00166EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2005-1994

Malware in sbrugna...

7.5CVSS5.8AI score0.06565EPSS
SaveExploits0References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2005-2114

Malware in sbrugna...

7.5CVSS6.4AI score0.01247EPSS
SaveExploits3References5
osv_usn
osv_usn
•added 2024/07/11 11:54 a.m.•48 views

USN-6891-1 python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities

It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS. CVE-2015-20107 It was discovered that Python incorrectly used regular expressions vulnerable to...

9.8CVSS7.2AI score0.24216EPSS
SaveExploits28References42
osv_debian
osv_debian
•added 2021/09/28 1:15 p.m.•28 views

DEBIAN-CVE-2021-37146

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

7.5CVSS7.4AI score0.02011EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/28 1:15 p.m.•28 views

CVE-2021-37146

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

7.5CVSS0.02011EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/09/28 1:15 p.m.•12 views

CVE-2021-37146

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

7.5CVSS7.2AI score0.02011EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/09/28 12:08 p.m.•38 views

CVE-2021-37146

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

7.5AI score0.02011EPSS
SaveExploits0References3
Mend
Mend
•added 2021/09/28 12:08 p.m.•7 views

CVE-2021-37146

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

8.7CVSS0.02011EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/28 12:00 a.m.•12 views

CVE-2021-37146: Loop with Unreachable Exit Condition

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

7.5CVSS5.8AI score0.02011EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/09/21 12:00 a.m.•33 views

CVE-2021-37146

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

7.5CVSS7.1AI score0.02011EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/09/21 12:00 a.m.•9 views

PT-2021-21529

Name of the Vulnerable Software and Affected Versions ROS Melodic versions 1.4.11 and earlier ROS Noetic versions 1.15.11 and earlier Description The issue is related to an infinite loop in the Open Robotics ros comm XMLRPC server, which allows remote attackers to cause a Denial of Service in ros...

7.5CVSS0.02011EPSS
SaveExploits0References14
osv_ubuntu
osv_ubuntu
•added 2021/09/21 12:00 a.m.•23 views

UBUNTU-CVE-2021-37146

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...

7.5CVSS7.2AI score0.02011EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2012:0642-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS9AI score0.05402EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
•added 2020/12/09 12:00 a.m.•72 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : php Multiple Vulnerabilities (NS-SA-2020-0059)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has php packages installed that are affected by multiple vulnerabilities: - In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HT...

9.8CVSS7.5AI score0.87348EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
•added 2020/10/15 12:00 a.m.•23 views

PT-2020-5780 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to a lack of privilege management mechanism in the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system. This allows attackers to gain...

9.8CVSS7.1AI score0.15703EPSS
SaveExploits1References47
Rows per page
Query Builder