ROOT-APP-NPM-CVE-2026-44792 CVE-2026-44792 in n8n - Patched by Root

Root has patched CVE-2026-44792 in the n8n package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-54306 CVE-2026-54306 in n8n - Patched by Root

Root has patched CVE-2026-54306 in the n8n package for Root:npm. Multiple fixed versions available...

copyfail-rs

copyfail-rs CVE-2026-31431（CopyFail）向けマルチベクターPoC + ペアの検出機能。 他の公開PoCにはない、新しいPAM認証バイパスベクターを搭載。 検出モードは、AIDE / Wazuh / OSSEC / Tripwireが構造的に検出できないものを捕捉します。 単一の静的バイナリ。約108 KB。nostd musl。 デモ noot@host:$ ./copyfail-rs --mode exploit sudo password for noot: root@host: id uid=0root gid=0root groups=0root...

[SECURITY] Fedora 45 Update: emacs-common-tuareg-3.0.1-17.fc45

Tuareg is an OCaml mode for GNU Emacs. It handles automatic indentation of Objective Caml and Caml Light code. Key parts of the code are highlighted using Font-Lock. Support to run an interactive Caml toplevel and debbuger is provided. This package contains the common files. Install emacs-tuareg ...

Rocky Linux 9.6 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ciqsa-2026_1587)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261587 advisory. This advisory aggregates security fixes for the php SRPM in CIQ LTS 9.6. It addresses 28 CVEs: CVE-2024-8925, CVE-2024-8927, CVE-2025-1217, CVE-2012-2386...

APT-Backpack

APT-バックパック APT、正当なRAT、および敵対者が使用するその他のツールで最もよく使われるCVE CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 未認証のファイル読み取り CVE-2019-19781 Citrix ADC & Gateway ディレクトリトラバーサル CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX 未認証のコマンドインジェクション CVE-2021-20090 Buffalo WSR-2533DHP2 WSR-2533DHP3...

MAL-2026-17571 Malicious code in @subql/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f636fe7b88ce4be7e029a7685f097fe9dc65090b919906ddf0368a3c07a3464a package.json declares a postinstall hook node./dist/project/readers/manifest-cache.js. That file embeds 60KB of base64 chunks under MANIFESTCACHESEED...

Malicious code in @subql/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f636fe7b88ce4be7e029a7685f097fe9dc65090b919906ddf0368a3c07a3464a package.json declares a postinstall hook node./dist/project/readers/manifest-cache.js. That file embeds 60KB of base64 chunks under MANIFESTCACHESEED...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cifs: fix use-after-free bug in refreshcacheworker The UAF bug occurred because we were putting DFS root sessions in cifsumount while DFS cache refresher was being executed. Make DFS root sessions have same lifetime as DFS tcons ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: sof-common: Added a NULL check for the normallink string. It is not guaranteed that all entries of struct sofconnstream declare a normallink a non-SOF, direct link string. This applies to SoCs that only support SO...

CVE-2026-105288 feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

CVE-2013-3827

CVE-2013-3827 CVE-2013-3827 によるディレクトリトラバーサルを利用してアクセス可能な一般的な設定のためのクイック PoC チェッカー 使い方: 1. ニーズに合わせて traversal.py の内容を変更してください 2. python3 traversal.py...

CVE-2026-105156 YzmCMS MD5 system.func.php password weak password hash

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...

CA-Common-Services-privilege-escalation-cve-2016-9795-revisited

CA Common Services 権限昇格 CVE-2016-9795 再訪 説明 あるペンテストにおいて、casrvc SUID バイナリ CA Common Services スイートの一部 に偶然遭遇しました。調査の結果、このバイナリはローカル権限昇格に対して脆弱であることがわかりました。実際、NCC グループによってこの脆弱性には公開 CVE CVE-2016-9795 が既に割り当てられていました。 脆弱性は非常に単純で、後で知ったことですが、NCC グループは PDF アドバイザリ...

PT-2026-105723

These are all security issues fixed in the python313-logilab-common-2.1.0-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12014-1 python313-logilab-common-2.1.0-1.4 on GA media

These are all security issues fixed in the python313-logilab-common-2.1.0-1.4 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: Due to the use of Jetty, IBM Sterling Control Center is vulnerable to Allocation of Resources Without Limits or Throttling (CVE-2026-19204)

Summary Jetty is used by IBM Sterling Control Center as part of dependency in jetty-websocket-core-common-12.0.25.jar. Vulnerability Details CVEID:CVE-2026-19204 DESCRIPTION: A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to...

[SECURITY] Fedora 45 Update: sgml-common-0.6.3-70.fc45

The sgml-common package contains a collection of entities and DTDs that are useful for processing SGML, but that don't need to be included in multiple packages. Sgml-common also includes an up-to-date Open Catalog file...

CVE-2026-85088

A flaw was found in Apache Thrift. During Transport Layer Security TLS certificate validation, the client libraries improperly evaluate the certificate's Common Name CN when subject alternative name SAN entries do not match the target host. A network-positioned attacker possessing a trusted...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via improper evaluation of the certificate's Common Name during TLS certificate validation when subject alternative name entries do not match the target host. An attacker can intercept or tamper with...