Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronized bitmapgetstats with the lifetime of the bitmap. After the commit with the code ec6bb299c7c3 “md/md-bitmap: add ‘syncsize’ into struct mdbitmapstats, a panic is reported: Oops: General Protection Fault,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Calling acpiputtable to fix a memory leak. The size of the event log area is obtained from the TPM2 or TCPA table. Therefore, we call acpigettable to retrieve ACPI information. However, acpigettable should be used in...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fixed a memory leak in the .getmodes function. The duplicated EDID values are never freed. This issue needs to be addressed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fixed a missing sentinel for clkdivtable gettablemaxdiv attempts to access the "clkdivtable" array outside its defined bounds in phy-j721e-wiz.c. A sentinel entry was added to prevent the following global-out-of-bounds...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usage counter unbalance in poweron The pmruntimegetsync function will increment the PM usage counter even if it fails. Forgetting to replace this function with the newer pmruntimeresumeandget function...

Astra Linux – Vulnerability in ntfs-3g

A properly crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfsgetattributevalue, in NTFS-3G 2021.8.22...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Avoid using a null object of the framebuffer. Instead of directly using state-fb-obj0, obtain the object from the framebuffer by calling drmgemfbgetobj. Return an error code when the object is null to avoid using a nu...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fixed the issue with mlx5ibgethwstats when used for devices. Currently, when mlx5ibgethwstats is used for a device where portnum = 0, there is a special handling to ensure that the correct counters are used. However,...

Astra Linux – Vulnerability in Tomcat9

There is a vulnerability related to improper input validation in Apache Tomcat. Tomcat did not restrict HTTP/0.9 requests to only the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, users could bypass this constraint on GET requests by...

CVE-2026-63269

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In...

CVE-2026-63267 LFI and GET SSRF via calcext:data-mappings and csv provider

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 CVE-2024-9796 취약점에 대한 기능적 PoC입니다. 이 취약점은 WordPress의 WP Advanced Search 자동 완성 플러그인에 영향을 미치며, 정제되지 않은 GET 매개변수를 통해 SQL 인젝션SQL Injection을 허용합니다. 📌 설명 이 취약점은 공격자가 자동 완성 엔드포인트의 t 매개변수를 통해 임의의 SQL 쿼리를 주입할 수 있도록 합니다:...

CVE-2025-55885

CVE-2025-55885 Описание Уязвимость SQL-инъекции в Alpes Recherche et Developpement ARD GEC en Ligne до версии v.2025-04-23 позволяет удаленному злоумышленнику повысить привилегии через GET-параметры в index.php Векторы атаки SQL-инъекция через несанитизированный GET-параметр ocid на...

CVE-2025-24893-PoC

CVE-2025-24893 – Удаленное выполнение команд в XWiki Proof of Concept Обзор Этот репозиторий содержит контролируемое доказательство концепции PoC для CVE-2025-24893 — уязвимости неавторизованного удаленного выполнения команд RCE в XWiki. Уязвимость позволяет злоумышленнику выполнять произвольные...

CVE-2025-47423

CVE-2025-47423 – Local File Inclusion in Personal Weather Station Dashboard 12lts Discovered by: Matthew Eagle Status: Public Disclosure Date Reported: 2025-05-05 CVE ID: CVE-2025-47423 🧩 Summary A Local File Inclusion LFI vulnerability in the Personal Weather Station Dashboard version 12lts allo...

semcms

Semcms 소개 SEMCMS는 다국어를 지원하는 외국 무역 웹사이트 콘텐츠 관리 시스템CMS입니다. v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip 취약점 원인: /xcR45qAdmin/SEMCMSMenu.php 66번째 줄 취약점 코드: query"SELECT FROM scmenu WHERE ID=" . $GET"ID"; ? 여기서 ID는 GET을 통해 매개변수를 전달할 때 SQL 문을 실행한다는 것을 알 수 있습니다. 필터 코드 위치...

Malicious code in aria-live-region-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391a9a163273e36e3945f918ea720b8e10aa462b0aa603d4012b28c557c58570 The package is advertised as an ARIA accessibility helper but ships thunderboltRegistry.js, which executes a top-level IIFE on module load. The IIFE...

PT-2026-106278

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

CVE-2026-105696: Missing Authorization

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and...

PT-2026-106086

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...