vulnerabilities and exploits

(subscribe to this query)

Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE) in util/parser.c of libming v0.4.8, which allow malicious users to cause a denial of service via a crafted ABC file.

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) malicious user to reset passwords, including the ones of administrator accounts, via crafted HTTP requests.

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

1 Github repository3 Articles

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such pack...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

2 Github repositories3 Articles

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: prior to 2022.1.3, prior to 2021.4.8, prior to 2021.3.13, prior to 2021.2.14, prior to 202...

Salesforce Tableau Server

CVE-2025-29891: Apache Camel: Camel Message Header Injection through request parameters

Below: World Writable Directory in /var/log/below Allows Local Privilege Escalation (CVE-2025-27591)

😈 Bienvenue sur mon GitHub ! 👾 Passionné par la cybersécurité et le développement 🌟 Toujours en train d'expérimenter de nouveaux outils 🚀 Voici un aperçu de mes ...

1 Github repository

Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws

1 Article

Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws

1 Article

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook