CVE-2023-36163

Exploit Title: BuildaGate5library - Cross-Site Scripting riflesso XSS Data: 06/07/2023 Autore Exploit: Idan Malihi Homepage del fornitore: Nessuna Versione: 5 Testato su: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: Un attaccante deve trovare il parametro vulnerabile mc= e iniettare il codic...

mc-log4j-patcher

mc-log4j-patcher Ersetzt die alte anfällige – CVE-2021-44228 Log4j2-Version durch die neueste 2.15.0, die den JNDI-RCE-Fix enthält. Getestet auf Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 Dies ist dazu gedacht, Server zu reparieren, die derzeit nicht unterstützt werden, wie z.B...

MC-Log4j-Patcher

MC-Log4J-Patcher L'obiettivo di questo progetto è fornire ai giocatori di Minecraft e ai proprietari di server tranquillità riguardo all'exploit Log4J recentemente scoperto CVE-2021-44228. Attualmente questo progetto cerca qualsiasi stringa di formato Log4J, non solo jndi, e le sostituisce o le...

Astra Linux – Vulnerability in libde265

Libde265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited through a specially crafted file...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Blocking calls to interrupt handlers without a trigger. The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL, and it may become NULL if the user sets the trigger eventfd to -1. The interrupt...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mcdev The committed code attempted to simplify the process of deallocations, but this led to a double-free on the mcdev variable. If the MC device is a DPRC, a new mcbus is allocated, and the mcdev...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bus: fsl-mc: Do not assume that child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as a child of fsl-mc devices, resulting in a crash when attempting to bind a fsl-mc device to VFIO. This...

MAL-2026-14305 Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f3053643e65c63fa7d8e3d5c48ae3d659650bd0052137099cd8674232780bc Package publishes as mc-registry with description 'Theta chain registry', but its README, badges, homepage layout, and package listing copy the...

MAL-2026-14294 Malicious code in mc-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f3053643e65c63fa7d8e3d5c48ae3d659650bd0052137099cd8674232780bc Package publishes as mc-registry with description 'Theta chain registry', but its README, badges, homepage layout, and package listing copy the...

PT-2026-72769

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration create sdw dailinks walks soc dais until it finds an entry with initialised cleared, but soc dais is allocated with exactly num ends entries. If all entries are initialised, the...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: minio-fips, mc, spire-server, spire-server-fips, falcoctl, mc-fips, falcoctl-fips, minio, boring-registry, boring-registry-fips, external-secrets-fips...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: mc, spire-server, spire-server-fips, falcoctl, cosign-fips, vexctl, falcoctl-fips, gitsign, minio, boring-registry, tekton-chains, external-secrets-fips, kubescape...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: tekton-chains, minio, gitsign, kubescape, spire-server, falcoctl, boring-registry, mc, vexctl...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: minio-object-browser, minio, tempo, minio-operator, splunk-otel-collector, istio, telegraf, certificate-transparency, loki, mc, cloud-sql-proxy, aws-otel-collector, datadog-agent, prometheus-pushgateway, keda, karma, mcp-grafana, trillian, grafana-pyroscope, jaeger...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: minio, spire-server, falcoctl, boring-registry, mc...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: node-problem-detector, opentelemetry-collector, minio, tempo, minio-operator, prometheus-operator, splunk-otel-collector, istio, prometheus, certificate-transparency, fluent-bit-plugin-loki, loki, mc, cloud-sql-proxy, aws-otel-collector, datadog-agent, grafana, k8sgp...

The vulnerability in the driver/bus/fsl-mc/fsl-mc-bus.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/bus/fsl-mc/fsl-mc-bus.c component in the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a system failure...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: The use-of-memory issue in driveroverrideshow has been fixed. The driveroverrideshow function reads the driveroverride string without holding the devicelock. However, driveroverridestore uses driversetoverride, which...