CLSA-2026-1790609840 TuxCare security update for nanoid (4 CVEs)

TuxCare rebuilt nanoid to address 4 CVEs. Fixed in 3.3.7-tuxcare.2...

CVE-2024-37888

CVE-2024-37888 This repository documents vulnerability details and exploit for CVE-2024-37888 discovered and reported by myself. Metrics CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVSS: 6.1 MEDIUM Vulnerability Overview This Proof of Concept POC...

grafana-CVE-2018-15727

Grafana CVE-2018-15727 exploit Installation $ go get github.com/u238/grafana-CVE-2018-15727 Usage $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for Grafana 5.x: grafanauser : ldapadm...

CVE-2026-63223-POC

CVE-2026-63223 PoC — CodeIgniter 4 File Upload RCE CVSS 9.8 Critical | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 : Unrestricted Upload of File with Dangerous Type Fixed : CodeIgniter 4 v4.7.4 Advisory : GHSA-mmj4-63m4-r6h5 Vulnerability Summary CodeIgniter 4's isimage and mimein file upload...

CVE-2002-0347

CVE-2002-0347 Vulnerabilidad de salto de directorio en Cobalt RAQ 4 permite a atacantes remotos leer archivos protegidos por contraseña, y posiblemente archivos fuera de la raíz web, mediante .. punto punto en una solicitud HTTP. Publicación de Packetstorm en...

CVE-2018-1000006-DEMO

CVE-2018-1000006-DEMO La demostración para CVE-2018-1000006 Análisis Electron v1.8.2-beta.4 Vulnerabilidad de ejecución remota de comandos — 【CVE-2018-1000006】 POC Se puede usar directamente elecrce\elecrce-win32-x64\elecrce.exe También puede empaquetarlo usted mismo como una aplicación exe,...

CLSA-2026-1790597933 TuxCare security update for fast-xml-parser (2 CVEs)

TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 4.5.1-tuxcare.4...

linux-4.1.15_CVE-2022-42703

Linux kernel release 4.x http://kernel.org/ Estas son las notas de la versión de Linux 4. Léalas con atención, ya que le explican de qué se trata todo esto, cómo instalar el kernel y qué hacer si algo sale mal. ¿QUÉ ES LINUX? Linux es un clon del sistema operativo Unix, escrito desde cero por Lin...

CVE-2002-0348

CVE-2002-0348 service.cgi en Cobalt RAQ 4 permite a atacantes remotos causar una denegación de servicio Publicación en Packetstorm en https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html Publicación en SecurityFocus en https://www.securityfocus.com/bid/4209 Autor Alex Hernandez ali...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-concept local privilege escalation via XFRM/ESP page-cache corruption 4-byte write primitive · 48 iterations · 192-byte ELF overwrite · unprivileged user + netns Proof of concept Left: kernel preflight, setuid scan, and exploit chain · Right: root shell...

CLSA-2026-1790488353 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 19.2.21-tuxcare.7...

CLSA-2026-1790477639 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 18.2.12-tuxcare.6...

CLSA-2026-1790477222 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 18.1.2-tuxcare.6...

CLSA-2026-1790476096 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 16.2.12-tuxcare.14...

CLSA-2026-1790474705 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 16.2.7-tuxcare.5...

CLSA-2026-1790470455 TuxCare security update for @angular (3 CVEs)

TuxCare rebuilt 17 @angular packages to address 3 CVEs. Fixed in 15.2.1-tuxcare.4...

CLSA-2026-1790461041 TuxCare security update for 18 packages (3 CVEs)

TuxCare rebuilt 18 packages to address 3 CVEs. Fixed in 1.19.3-tuxcare.4...

CLSA-2026-1790443334 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 12.2.17-tuxcare.11...

RHCOS 4 : OpenShift Container Platform 4.15.69 (RHSA-2026:67856)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67856 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

Formie: Missing authorization on sent notification resend modal exposes submission PII

Impact The control panel action formie/sent-notifications/get-resend-modal-content SentNotificationsController::actionGetResendModalContent performed only requireAcceptsJson and loaded a SentNotification by request id without permission or object-level authorization checks. Any authenticated user...