All CVEs — page 1068 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
Rsdoctor's default report server binds to all interfaces and exposes sensitive build data via an unauthenticated API endpoint with wildcard CORS, allowing remote attackers to retrieve complete source code and build metadata without any authentication or authorization.
The flaw allows an attacker to exploit XML External Entity (XXE) attacks, leading to file disclosure, SSRF, and denial of service.
The flaw allows attackers to bypass security guardrails by injecting special-token literals into web crawl results, leading to arbitrary command execution within the Kali Linux sandbox.
This vulnerability allows for a potential use-after-free condition in the Linux kernel, which could lead to a null pointer dereference if an IRQ thread accesses a freed context.